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SPECIFICATION 

TITLE OF THE INVENTION 
Communication proxy apparatus 

5 

BACKGROUND OF THE INVENTION 

The present invention relates to a communication 
proxy apparatus, which relays communication between a 
server device and a client device as an agent in a network 
10 system including WWW (World Wide Web) used for accessing 
information data on the server device from the client 
device connected through a communication line, and also 
relates to a system that uses said communication proxy 
apparatus. 

15 A conventional communication proxy technology is 

described in RFC2068 "Hypertext Transfer Protocol - 
HTTP/1. 1" (pages from 11 to 13) issued on January 1997. 
According to this prior art, a communication proxy 
apparatus for relaying communication as an agent is 

20 provided between a WWW server device and a client device to 
speed up an access to World Wide Web data, which is 
information data on the server device, from the client 
device . 

In the prior art, speed-up of an access from the 
25 client device is achieved by the following: the 
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communication proxy apparatus for relaying communication 
between both devices as an agent is provided between the 
server device and the client device; and the communication 
proxy apparatus maintains and manages relayed information 
5 data as a cache. More specifically, the congestion of 

accesses from the plurality of client devices to the server 
device are prevented, and speed-up of an access from each 
client device is achieved, by the following steps: holding 
information data, which has been relayed by the 

10 communication proxy apparatus as an agent, as a cache; and 
for an access request from the client device for an access 
to information data, of which a latest version has already 
been held as a cache, not relaying the access request as an 
agent, but returning the cache. 

15 In addition, a technology for efficiently accessing 

information data on a server device, which is periodically 
updated, from a client device is described in "An 
introduction to XML" issued by Nihon Keizai Shimbun, Inc. 
in 1998 (pages from 36 to 47) . 

20 In this prior art, cache expiration time information 

is added to information data, which is distributed from the 
server device, as attribute information of the information 
data, before transmitting the information data to client 
devices. Client devices can acquire the latest information 

25 data by reacquiring the latest information data repeatedly 
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according to the cache expiration time information. 

SUMMARY OF THE INVENTION 

The above-mentioned prior art, which utilizes the 
5 conventional communication proxy apparatus , has an 

advantage that it is possible to prevent the congestion of 
accesses to the server device, and to speed up the access 
to the server device, by utilizing a cache of the 
communication proxy apparatus successfully. 

10 However, on the other hand, there is the following 

problem: only part of the access requests is transferred to 
the server device because an access request is handled by 
each communication proxy apparatus using the cache; 
therefore, it is not possible to collect all access 

15 information, each of which contains the information 

concerning accessed information data and client devices 
that have issued the access request for the accessed 
information data. 

In addition, there is another problem: when checking 

20 access authority, even if the cache data is available, the 
access request must always be transferred to the server 
device to request the server device to perform the check. 

Moreover, the following problem also arises: the 
above-mentioned prior art that client devices request the 

25 latest information data periodically through the cache 
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cannot work well in the case of information data for which 
an update frequency cannot be expected beforehand. One of 
ways to utilize the cache of each communication proxy 
apparatus for the information data of which update 
5 frequency cannot be expected is to forcibly set a certain 
cache expiration time information. However, that causes 
the cache held in each communication proxy apparatus 
inconsistent with the information data on the server device 
side. As a result, client devices may refer to old 

10 information data for a relatively long time. Therefore, in 
order to keep the cache of all communication proxy 
apparatuses consistent with the information data on the 
server device with short time delay, it is necessary to 
update all corresponding caches held in each communication 

15 proxy apparatus every time the information data on the 
server device is updated. 

In some conventional systems, a means to update the 
cache held in communication proxy apparatuses and client 
devices is provided by specifying each target communication 

20 proxy apparatus and client device to be updated. However, 
there is the following problem in this solution: it is 
necessary to transmit data to all relevant communication 
proxy apparatuses by specifying serially one by one taking 
a configuration of the communication proxy apparatuses into 

25 consideration; and there is a possibility of unnecessarily 
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transmitting the latest information data even to a 
communication proxy apparatus that does not hold a 
corresponding cache . 

For the purpose of coping with the problems relating 
5 to the collection of access information, and the cache 

update, some conventional communication proxy apparatuses 
use another method by which the problems are solved using 

;Ji an access log for each information data. To be more 

ipl 

4l specific, access information on accesses to specific 

03 10 information data is collected by referring to the access 
^ l log held in each communication proxy apparatus, and by 

J extracting accesses to the specific information data. In 

addition , the cache is updated by using the collected 
?* access information, and by transmitting the latest 

15 information data only to communication proxy apparatuses 
that have actually accessed the information data. 

However, in this solution, there was no means for 
limiting target information data to be logged in an access 
log. Because of it, there were the following problems: 
20 each communication proxy apparatus was required to hold an 
access log containing an enormous amount of data; in 
addition, even if there was the means for limiting target 
information data to be logged in an access log, individual 
settings were required for each communication proxy 
25 apparatus, and it was difficult to make the settings. 



Moreover, there were also problems relating to the above- 
mentioned collection processing: the processing became 
serial because an access log held in each communication 
proxy apparatus was obtained and processed sequentially one 
by one; and traffics in the network increased because the 
same communication channel might be passed through many 
times when acquiring each access log, which required 
considerable time for the processing. As regards access 
authority check, there was also a similar problem, that is 
to say, individual settings were required for each 
communication proxy apparatus to avoid a check request that 
was transferred to the server device. 

The above-mentioned problems of the prior art can be 
solved by additionally providing a communication proxy 
apparatus with the following two means. 

In the first place, each communication proxy 
apparatus is provided with an individual action control 
means. The individual action control means is a means for 
instructing each communication proxy apparatus to perform 
various kinds of processing, such as keeping an access log 
on specific information data. 

The individual action control means comprises an 
individual action storage means, an individual action 
instruction means, an individual action execution means, 
and an individual action tag adding/ removing means. 
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The individual action storage means holds individual 
action definition information indicating a relationship 
between action information and specific information data. 
The action information indicates an action to be executed 
5 for the specific information data , and execution conditions 
and parameters, which are used for the action. 

The individual action instruction means provides a 
function of registering the above-mentioned individual 
action definition information in the individual action 

10 storage means using the following two methods. One method 
is as follows: an operator, or the like, gives explicit 
instruction, which includes identification information of 
target information data and action information to be 
executed for the information data, to the individual action 

15 instruction means so that the instructed information is 

registered in the individual action storage means. Another 
method is as follows: an individual action tag for 
instructing action information to be executed for the 
information data is added to the reply data, and reply data 

20 received by the communication proxy apparatus is checked by 
the individual action instruction means; if it is found out 
that an individual action tag for instructing action 
information to be executed for the information data is 
added to the reply data, individual action definition 

25 information for the information data is registered 
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according to the action information. 

The individual action execution means executes the 
instructed individual action for the information data, 
which is instructed by the individual action definition 
5 information, under instructed conditions. 

The individual action tag adding/removing means adds 
the above-mentioned individual action tag, or removes the 
added individual action tag, under a certain condition, 
when transmitting from the communication proxy apparatus 

10 the information data received by the communication proxy 
apparatus, and the individual action tag added data 
received together with the information data. The 
individual action tag is added, for example, when 
transmitting information data for which individual action 

15 definition information is registered by an explicit 

instruction of action information. The individual action 
tag is deleted, for example, when transmitting information 
data with an individual action tag to the client device. 
In this connection, judgment whether or not the individual 

20 action definition information has been registered by an 
explicit instruction of action information is made by 
providing the above-mentioned individual action definition 
information with an action type classification information, 
which indicates that the individual action definition 

25 information is registered by an explicit instruction of 
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action information or that the individual action definition 
information is registered by an individual action tag added 
to the information data. The action type classification 
information is registered when the above-mentioned 
5 individual action instruction means registers the 
individual action definition information of each 
information data in the action storage means. 

Next, as a means for hierarchical execution of a 
collection process of access logs and a update process of a 

10 cache, and the like, a distributed access control means is 
provided for each communication proxy apparatus. 

The distributed access control means comprises an 
access logging instruction means, an access logging means, 
an access log storage m^ans , and a hierarchical execution 

15 means . 

The access logging instruction means instructs the 
communication proxy apparatus to keep an access log 
relating to an access request for the specific information 
data described above. The access logging instruction means 

20 is configured using the above-mentioned individual action 
control means for example. 

The access logging means logs an access record of a 
device or a user from which an access request is issued, 
when the communication proxy apparatus handles the access 

25 request for the information data for which the access log 
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is instructed by the above-mentioned access logging 
instruction means . 

The access log storage means holds the access log 
recorded by the access logging means. 

The hierarchical execution means performs the 
following steps: receiving a processing request instruction 
for specific information data; executing the instructed 
processing request for the instructed information data; 
transferring the processing request instruction to 
communication proxy apparatuses of lower levels, of which 
the above-mentioned access log storage means keeps an 
access log for the instructed information data; and after 
executing the processing request hierarchically, 
aggregating execution results obtained from the 
communication proxy apparatuses of lower levels and an 
execution result of own communication proxy apparatus, and 
returning the aggregated result. 

In addition, for the purpose of checking access 
authority in each communication proxy apparatus in a 
distributed manner, the distributed access control means is 
additionally provided with an access check means. 

Using a communication proxy apparatus having the 
action control means and the distributed access control 
means described above solves the above-mentioned problems 
as follows. 



As regards the collection of access logs, to begin 
with, through the individual action instruction means, an 
operator specifies server-side edge communication proxy 
apparatus, which is connected to the server device not 
through another communication proxy apparatus but directly 
through a communication path, an identification information 
of target information data for which an access log should 
be kept, and an action information to make the above- 
mentioned access logging means executed for the target 
information data at appropriate timing of the access 
processing for the v information data. 

In response to the instruction, in the edge 
communication proxy apparatus on the server device side, 
the individual action execution means executes an action 
according to the instruction, and only when an access 
request for the information data is issued, the access is 
logged . 

Moreover, in the edge communication proxy apparatus 
on the server device side, when reply data received from 
the server device is transmitted to other communication 
proxy apparatuses, the individual action tag 

adding/ removing means adds an individual action tag, which 
instructs execution of the above-mentioned access logging 
means when handling the access request for the information 
data, to the reply data. Therefore, a communication proxy 



apparatus, which is located on the client device side as 
compared with an edge communication proxy apparatus on the 
server device side, receives information data with the 
individual action tag. Because of it f in each 
communication proxy apparatus, likewise, an access log is 
kept only when an access request for the information data 
is issued. 

Finally, in an edge communication proxy apparatus of 
the client side, which is connected directly to the client 
device through the communication path, when reply data 
received by the communication proxy apparatus is 
transmitted to the client device, the above-mentioned 
individual action tag adding/removing means removes the 
individual action tag, which has been added to the reply 
data, before the reply data is transmitted. 

That is to say, only an instruction given to an edge 
communication proxy on the server device side enables an 
access log only for specific information data, to be kept 
in each communication proxy apparatus without changing the 
server device or the client device. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a configuration diagram illustrating a 
communication proxy apparatus according to the present 
invention ; 
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Fig. 2 is a configuration diagram illustrating an 
information processing unit that is used as a server device, 
a client device, and a communication proxy apparatus 
according to the present invention; 
5 Fig. 3 is a logical configuration diagram 

illustrating a network system according to the present 
invention; 

Fig. 4 is a configuration diagram illustrating 
information that is stored in an" external storage unit of a 
10 server device according to the present invention; 

Fig. 5 is a configuration diagram illustrating 
access request information according to the present 
invention ; 

Fig. 6 is a configuration diagram illustrating reply 
15 data information for an access request according to the 
prior art; 

Fig. 7 is a configuration diagram illustrating a 
communication proxy apparatus according to the prior art; 
Fig. 8 is a process flowchart of a access request 
20 agent means that is used for an access request for 
information data in a communication proxy apparatus 
according to the prior art; 

Fig. 9 is a configuration diagram illustrating 
individual action definition information that is stored in 
25 an individual action storage means according to the present 



invention ; 

Fig. 10 is a process flowchart of an individual 
action instruction means based on an explicit instruction, 
which uses an information data identifier, according to the 
present invention ; 

Fig. 11 is a configuration diagram illustrating 
reply data information for an access request according to 
the present invention; 

Fig. 12 is a configuration diagram illustrating an 
individual action tag according to the present invention; 

Fig. 13 is a process flowchart of an individual 
action instruction means based on an individual action tag, 
which is added to information data, according to the 
present invention ; 

Fig. 14 is a process flowchart of action check 
processing executed for an event of an individual action 
execution means according to the present invention; 

Fig. 15 is an initialization process flowchart of 
action check processing that is based on a schedule of an 
individual action execution means according to the present 
invention ; 

Fig. 16 is a process flowchart of action check 
processing that is based on a schedule of an individual 
action execution means according to the present invention, 
which is invoked by a timer interruption; 



Fig. 17 is a process flowchart of an individual 
action tag adding/removing means used when transmitting 
reply data from a communication proxy apparatus according 
to the present invention; 

Fig. 18 is a configuration diagram illustrating an 
access log that is stored in an access log storage means 
according to the present invention; 

Fig.. 19 is a process flowchart of hierarchical 
execution processing of a hierarchical execution means 
according to the present invention; 

Fig. 20 is an explanatory diagram illustrating a 
processing request at the time of requesting a hierarchical 
execution according to the present invention; 

Fig. 21 is another explanatory diagram illustrating 
a processing request at the time of requesting a 
hierarchical execution according to the present invention; 

Fig. 22 is an explanatory diagram illustrating an 
execution result of a hierarchical execution processing 
according to the present invention; 

Fig. 23 is another configuration diagram 
illustrating an access log that is stored in an access log 
storage means according to the present invention; 

Fig. 24 is a configuration diagram illustrating a 
network that includes a user information management server 
according to the present invention; 



Fig. 25 is a process flowchart of an access 
authority check performed by an access check means 
according to the present invention; 

Fig. 26 is a process flowchart (No. 1) of an access 
request agent means of a communication proxy apparatus 
according to the present invention; 

Fig. 27 is a process flowchart (No. 2) of an access 
request agent means of a communication proxy apparatus 
according to the present invention; 

Fig. 28 is a process flowchart of a communication 
agent method according to the present invention; 

Fig, 29 is another process flowchart of a 
communication agent method according to the present 
invention ; 

Figs. 30 is another configuration diagram 
illustrating information that. is stored in an external 
storage unit of a server device according to the present 
invention ; 

Fig. 31 is a schematic diagram of a process flow 
illustrating a client device, a communication proxy 
apparatus, and a server device, at the time of a cache miss, 
in a case where a communication agent method according to 
the present invention is used; 

Fig. 32 is a process flowchart of a client device, a 
communication proxy apparatus, and a server device, at the 



time of a cache miss, in a case where a communication agent 
method according to the present invention is used; 

Fig. 33 is a schematic diagram of a process flow 
illustrating a client device , a communication proxy 
apparatus, and a server device, at the time of a cache hit 
as a result of issuing an access request again from the 
same client device, using a communication agent method 
according to the present invention; 

Fig. 34 is a process flowchart of a client device, a 
communication proxy apparatus, and a server device, at the 
time of a cache hit as a result of issuing an access 
request again from the same client device, using a 
communication agent method according to the present 
invention; 

Fig. 35 is a schematic diagram of a process flow 
illustrating a client device, a communication proxy 
apparatus, and a server device, at the time of a cache hit 
as a result of issuing an access request from another 
client device, using a communication agent method according 
to the present invention; 

Fig. 36 is a process flowchart of a client device, a 
communication proxy apparatus, and a server device, at the 
time of a cache hit as a result of issuing an access 
request from another client device, using a communication 
agent method according to the present invention; 
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Fig. 37 is a configuration diagram illustrating an 
individual action tag based on program description 
according to the present invention; 

Fig. 38 is a configuration diagram illustrating 
individual action definition information that uses an 
action based on a program description according to the 
present invention ; 

Fig. 39 is a configuration diagram illustrating a 
communication proxy apparatus having a program load means 
according to the present invention; 

Fig. 40 is a configuration diagram illustrating an 
action program correlation table according to the present 
invention; and 

Fig. 41 is a process flowchart of a program load 
means according to the present invention. 

DETAILED DESCRIPTION OF THE INVENTION 

Before describing embodiments of the present 
invention, some basic parts, which are preconditions of the 
present invention, will be described with reference to Figs. 
3 and 5. 

Fig. 3 is a logical configuration diagram 
illustrating a network system relating to a communication 
proxy apparatus according to the present invention. Server 
devices 1 (la, lb) and client devices 2 (2a through 2d) are 



connected to each other through communication paths 4 via 
one or more communication proxy apparatuses 3 (3a through 
3d) . The communication path 4 is a logical communication 
channel for transmitting and receiving data between devices 
that are connected through the communication path 4. One 
communication path 4 may be realized on a plurality of 
physical communication lines via one or more router devices, 
or the like. In contrast with this, a plurality of 
different communication paths 4 may be realized on one 
physical communication line. Each of the server devices 1 
has an external storage unit 13. One or more pieces of 
information data 50, and attribute information 51 of the 
information data 50 are stored in the external storage unit 
13 . 

Fig. 4 shows one example of information stored in 
the external storage unit 13. Each piece of the 
information data 50 is stored in the external storage unit 
13 of the server device 1, together with the attribute 
information 51 of the information data 50, which includes 
update time information 52, caching possibility information 
53, and cache expiration time 54. The information data 50 
in this server device 1 is managed so that each piece of 
the information data 50 can be identified by an information 
data identifier 58 such as a filename. In addition, the 
server device 1 has an access request processing means 21. 
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The access request processing means 21 provides a function 
of receiving an access request 40, which is issued for each 
piece of the information data 50, from the client device 2 
and the communication proxy apparatus 3 through the 
communication path 4, and also a function of sending back 
reply data 61, which includes the information data 50 
corresponding to the access request 40, through the 
communication path 4. 

Eig. 5 shows a configuration of the access request 
40. The access request 40 includes, for example, accessor 
information 43, a client/proxy classification 44, request 
kind information 45, an information data identifier 41, and 
original access request issuer information 42. The 
accessor information 43 represents authentication 
information, such as identification information and a 
password, which are possessed by the client device 2 that 
has issued the access request 40, or by the communication 
proxy apparatus 3 that has issued the request as an agent. 
The client/proxy classification 44 indicates that the 
access request 40 is a request from the client device 2 or 
an agent request from the communication proxy apparatus 3. 
The request kind information 45 indicates a kind of the 
access request, that is, whole data access, partial data 
access, and the like. The information data identifier 41 
is information for identifying information data 50 as an 



access target. The information data identifier 41 is 
combined information of identification information of the 
server device 1 as a target, and an information data 
identifier 58 corresponding to information data 50 stored 
in the server device 1. The original access request issuer 
information 42 represents authentication information, such 
as identification information and a password, which are 
possessed by an user or client device 2 who issued the 
access request 40* 

In this connection, in the example of an actual Web 
transfer protocol, communication peer information of the 
communication path 4 got when the communication path 4 is 
set, routing information indicating routed communication 
proxy apparatus 3, optional authentication information, and 
the like, as a whole, provide information equivalent to the 
accessor information 43, the proxy/client classification 44 
and the original access request issuer information 42 
described above. 

Here, the prior art will be described with reference 
to Fig. 6 or 8 as below. The description of the prior art 
is required to explain embodiments of the present invention 

Fig. 6 shows a configuration of conventional reply 
data 61. The conventional reply data 61 includes, for 
example, an information data identifier 41, attribute 
information 51 of information data 50, and the information 



data 50. 

A client device has an access request means 22. The 
access request means 22 provides the following functions: 
receiving an information data identifier 41 of the 
information data 50 as an access target from an operator, 
or the like, of the client device; issuing an access 
request 40, for an access to the information data 50 on the 
server device, to a corresponding communication proxy 
apparatus through the communication path 4; and displaying 
the information data 50 included in reply data 61, which 
has been returned from the communication proxy apparatus, 
for the operator. 

Fig. 7 shows a configuration example of a 
conventional communication proxy apparatus. The 
conventional communication proxy apparatus has an access 
request agent means 31 and caching means 32. The access 
request agent means 31 provides the following functions: 
receiving an access request 40 for an access to the above- 
mentioned information data 50 on the server device from the 
client device or another communication proxy apparatus; in 
response to the access request 40, as an agent, issuing the 
access request 40 to another communication proxy apparatus 
or the server device; obtaining reply data 61 including the 
requested information data 50 and attribute information 51 
of the information data; and returning the obtained reply 



data 61 to the requester. Moreover, in a certain condition, 
the access request agent means 31 holds and controls the 
obtained reply data 61, which has been got through the 
agent processing, as a cache 59 using a caching means 32. 

When receiving the above-mentioned access request 40, 
the access request 40 is not always transmitted as an agent 
request. If this cache control judges that the reply data 
61, which has been held as the cache 59, is available, the 
access request 40 is not transmitted, but the cache 59 is 
returned to the requester as latest reply data 61. The 
caching means 32 comprises a cache storage means 33 and a 
cache control means 34. The cache storage means 33 has a 
function of holding the information data 50, which has been 
obtained by the above-mentioned access request agent means 
31, and the reply data 61, which includes the attribute 
information 51 of the information data, as the cache 59. 
The cache control means 34 controls the cache 59, which is 
held in the cache storage means 33, to enable an access to 
each cache 59 using the information data identifier 41 
corresponding to each information data 50 as a key. In 
addition to it, the cache control means 34 provides a 
function of replacing the cache 59 under the condition of 
limited storage capacity. 

Fig. 8 is a process flow of the access request agent 
means 31 for handling the access request 40, which requests 



to access the information data 50 from the client device or 
another communication proxy apparatus, in the conventional 
communication proxy apparatus. 

In the first place, the access request agent means 
31 of the communication proxy apparatus receives an access 
request 40 for certain information data 50 from the client 
device or another communication proxy apparatus through the 
communication path 4 (process 101) . Next, the access 
request agent means 31 requests the corresponding cache 59 
to the cache control means 34, with specifying the 
information data identifier 41 given by the access request 
40 (process 102) . If it can be determined that the 
corresponding cache 59 exists, and that the cache 59 is 
available, judging from information including the cache 
expiration time information 54, etc. included in the 
attribute information 51 of the information data 50 held in 
the cache 59, the cache 59 is set as reply data 61 for the 
above-mentioned access request 40 before the process jumps 
to a process 106 (process 103) . If the corresponding cache 
59 does not exist, or if it cannot be determined whether or 
not the cache is available, the specified access request 40 
is transmitted to the server device or another 
communication proxy apparatus to obtain the reply data 61 
that includes the requested information data 5 0 and the 
attribute information 51 of the information data 50 
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(process 104) . When referring to the attribute information 
51 of the information data, which is included in the reply 
data 61 obtained by process 104, if a non-cacheable 
attribute is not specified in the caching possibility 
5 information 53, the cache control means 34 is requested to 
hold the reply data 61, as a cache 59 , in the cache storage 
means 33 (process 105). Finally, the reply data 61 
obtained in the process 103 or the process 105 is returned 
to the requester through the communication path 4 , and then 

10 the process ends (process 106) . 

The following describes embodiments of the present 
invention with reference to drawings. 

A configuration example of a network system 
according to the present invention is shown in Fig. 3. 

15 Server devices 1 (la, lb) and client devices 2 (2a 

through 2d) are connected to each other through 
communication paths 4 via one or more communication proxy 
apparatuses 3 (3a through 3d) . The communication path 4 is 
a logical communication channel for transmitting and 

20 receiving data between devices that are connected through 
the communication path 4 . One communication path 4 may be 
realized on a plurality of physical communication lines via 
one or more router devices, and the like. In contrast with 
this, a plurality of different communication paths 4 may be 

25 realized on one physical communication line. 
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Each of the server device 1, the client device 2, 
and the communication proxy apparatus 3. is physically 
configured using, for example, a general information 
processing unit 10. To be more specific, as shown in Fig. 
5 2, a general information processing unit 10 is configured 
as a device in which for example the following are 
connected through a bus 17 for exchanging data: a processor 

Pi ■ 

Ji 11 for executing an information processing program; a 

=yp memory 12 for storing the information processing program, 

63 10 which is being executed, and data; the external storage 

«■ unit 13 for storing the information processing program and 

J! data semi-permanently ; a communication unit 14 for 

f;? providing a physical communication line 18, which is 

7! connected to other information processing units, with the 

15 logical communication path 4; an operator input/output unit 
15 by which an operator is provided with input/output 
means; and a timer 16 that has a function of providing 
current time information, and a function of starting 
processing with periodical or specified timing. A variety 
20 of processing means described below, which are provided in 
the server device 1, the client device 2, and the 
communication proxy apparatus 3, may be realized using a 
special hardware mechanism. However, as one embodiment, 
each of the processing means is realized by a program. In 
25 other words, a program, which provides a function of each 



processing means, is stored in the memory 12; and executing 
the program by the processor 11 through the bus 17 realizes 
each processing means. In addition, some storage means in 
the communication proxy apparatus described below are 
realized using a part of the memory 12 or a part of the 
external storage unit 13. Moreover, instructions given to 
an individual action instruction means 72, a hierarchical 
execution means 84, and a program load means 79, which will 
be described below, are performed through the operator 
input/output unit 15 or the logical communication path 4 
that is realized on the communication line 18 by the 
communication unit 14 . 

As regards internal configurations of the server 
device 1 and the client device 2, as shown in Fig. 4, one 
or more pieces of information data 50, together with the 
attribute information 51 of the information data 50, which 
includes the update time information 52, the caching 
possibility information 53, the cache expiration time 54, 
are stored and managed in the external storage unit 13 of 
the server device 1 so that the information data 50 can be 
identified by an information data identifier 58 such as a 
filename. In addition, in the server device 1, there is an 
access request processing means 21 for handling an access 
request 40 for the information data 50 from the client 
device 2 or the communication proxy apparatus 3. On the 
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other hand, in the client device 2, there is an access 
request means 22 for issuing an appropriate access request 
40 to the communication proxy apparatus 3 in response to an 
information data identifier 41 of the information data 50 
5 as an access target, which is given by the operator, or the 
like. In this connection, the access request 40 is 
configured by the information shown in Fig. 5. 
yp The server devices 1 have an external storage unit 

%I3 13. One or more pieces of information data 50, and the 

03 10 attribute information 51 of the information data 50, are 
in stored in the external storage unit 13. Fig. 4 shows one 

example of information stored in the external storage unit 
(~ 13. Each piece of the information data 50 is stored in the 

J external storage unit 13 of the server device 1, together 

15 with the attribute information 51 of the information data 
50, which includes the update time information 52, the 
caching possibility information 53, and the cache 
expiration time information 54. The information data 50 in 
this server device 1 is managed so that each piece of the 
20 information data 50 can be identified by an information 
data identifier 58 such as a filename. In addition, the 
server device 1 has an access request processing means 21. 
The access request processing means 21 provides a function 
of receiving an access request 40, which is issued for each 
25 piece of the information data 50, from the client device 2 
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and the communication proxy apparatus 3 through the 
communication path 4, and also a function of sending back 
reply data 61, which includes the information data 50 
corresponding to the access request 40, through the 
communication path 4 „ 

Fig. 1 shows a configuration example of a 
communication proxy apparatus 3 according to the present 
invention. The communication proxy apparatus 3 according 
to the present invention comprises an individual action 
control means 70 and a distributed access control means 80, 
in addition to the access request agent means 31 and the 
caching means 32 that are included in the conventional 
communication proxy apparatus shown in Fig. 7. 

The access request agent means 31 provides the 
following functions: receiving an access request 40 f which 
requests to access the information data 50 on server device 
1, from the client device 2 or another communication proxy 
apparatus 3; in response to the access request 40, as an 
agent, issuing the access request 40 to another 
communication proxy apparatus 3 or the server device 1; and 
returning the reply data 61, which has been acquired as a 
result of the agent request, to the requester. Moreover, 
in a certain condition, the access request agent means 31 
holds the obtained reply data 61, which has been got 
through the agent processing, as a cache 59 using the 
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caching means 32. When receiving the above-mentioned 
access request 40, the access request 40 is not always 
transmitted as an agent request. If this cache control 
judges that the reply data 61, which has been held as the 
5 cache 59, is available, the access request 40 is not 

transmitted, but the cache 59 is returned to the requester 
as latest reply data 61. 
^ The access request agent means 31 according to the 

present invention is different from the prior art on the 
g 10 following point: the individual action control means 70 and 
pi the distributed access control means 80, which are newly 

hk provided by the present invention ^ are activated as 

O necessary at certain timing. Details will be described 

Q later. 

15 The caching means 32 stores and manages the reply 

data 61, which has been received from the server device 1 
or the communication proxy apparatus 3, as a cache 59 so 
that the access request agent means 31 described above can 
access the reply data 61 afterward using the corresponding 
20 information data identifier 41 as a key. Moreover, in the 
present invention, there is a case where additional data 
such as an individual action tag 62 described later is 
added to the received reply data 61. In the caching means 
32 according to the present invention, the reply data 61 
25 containing the additional data is totally managed as a 
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cache 59 . 

The individual action control means 70 further 
comprises individual action storage means 71, the 
individual action instruction means 72, individual action 
5 execution means 73, and individual action tag 
adding/ removing means 74. 

The individual action storage means 71 holds 
P% individual action definition information 90 that defines an 

£Q action to be executed for specific information data 50. 

Q 10 Fig. 9 shows a configuration example of data stored in the 
fy individual action storage means 71. In this embodiment , 

S! the individual action storage means 71 is configured using 

M a table in which each line entry comprises the individual 

in 5 ?- 

action definition information 90. Each of the action 
r " 15 definition information 90 comprises an information data 
identifier 41 for indicating target information data 50, 
action type classification information 92 for indicating a 
type of an action specifying method described later, and 
action information 93 that is information on an action 

20 actually executed. The action information 93, for example, 
comprises action identification information 94 for 
specifying or identifying an action to be executed, an 
action condition 95 for indicating execution conditions of 
the action, an action parameter 9 6 that is a parameter when 

25 executing an action, and an action validity term 97 of the 



action information 93, and the like. An example of the 
first entry shown in Fig. 9 represents the following: until 
10:00 AM on January 1, 1999, access logging should be made 
at the time of reply data transmission for an access to 
information data 50 that is identified by //serverla/f al : 
and this action definition is registered by an explicit 
instruction specifying identification information of the 
information data (described later) . 

There may be a case where a plurality of different 
type actions are desired to be executed for the same 
information data 50. Therefore, there may be a plurality 
of entries having the same information data identifier 41 
in the table in Fig. 9. However, because explanation will 
become complicated, process flows or the like will be 
described assuming that a number of entries having the same 
information data identifier 41 is at most one. 

In the embodiment shown in Fig. 9, the individual 
action definition information 90 includes the action 
condition 95 and the action validity term 97. These 
information enables followings: conditions for executing an 
action and a action expiration time can be specified; and 
after the expiration time, the individual action definition 
information 90 can be deleted. 

The individual action instruction means 72 provides 
a function of registering the above-mentioned individual 



33 



action definition information 90 in the individual action 
storage means 71 using two kinds of methods as follows: 
instructing explicitly by an operator or the like using 
identification information of target information data; and 
5 instructing by adding an instruction to information data to 
be transmitted. 

Fig. 10 shows an example of a process flow of 
processing that is performed by the individual action 
instruction means 72 according to an explicit instruction 
10 in which action information for a target information data 
is specified using an identification information of the 
information data. Details of the processing are shown in 
Fig. 10. 

According to another method for instructing an 
15 individual action , an individual action tag 62 , which shows 
an action to be executed for information data 50 in each 
proxy device 3, is added to reply data 61. Then, the reply 
data 61 is transmitted to instruct the action. Fig. 11 
shows a configuration of the reply data 61 according to the 
20 present invention. In Fig. 6 illustrating the conventional 
example, the reply data 61 comprises the information data 
identifier 41, the attribute information 51 of the 
information data 50, and the information data 50, and the 
like. However, as shown in Fig. 11, reply data 61 
25 according to the present invention further comprises an 
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individual action tag 62, which shows an action in each 
proxy device 3, as an option. Fig. 12 shows a 
configuration example of the individual action tag 62. In 
HTTP as a data transmitting/receiving protocol of Web, and 
5 in HTML and XML as data description languages that describe 
Web data, it is prescribed how to specify its data kind. 
In HTTP, HTML and XML, information data is transmitted with 
□ a header or a trailer before and after the data specifying 

Q3 its data kind in character strings. Following the rule, 

0 10 the information data 50 of the above-mentioned reply data 
^3 61 and each piece of the attribute information 51 of the 

: information data 50 are transmitted with such headers and 

JS? trailers to specify their data kinds. Because of it, as a 

2~ means for distinguishing the individual action tag 62 from 

15 the information data 50 and the attribute information 51, 
the individual action tag 62 is configured to have a form, 
in which the action information 93 is inserted between an 
action tag identification header 68 and an action tag 
identification trailer 69 to identify the individual action 
20 tag 62, in the same manner as the header and the trailer 
that identify the information data 50 and the attribute 
information 51. To be more specific, in the embodiment 
shown in Fig. 12, a character string <proxy-action-tag> is 
used as the action tag identification header 68, a 
25 character string </proxy-action-tag> is used as the action 
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tag identification trailer 69. In addition, each field of 
the action information 93 is also described in the same 
manner, that is to say, each of the fields is inserted 
between corresponding header and trailer character strings. 
5 According to the embodiment shown in Fig. 12, the 

individual action tag 62 can be mixed with the information 
data 50 described in XML , or the like, when the individual 
action tag 62 is described as stated above. This produces 
a following benefit: together with the information data 50, 
10 the individual action tag 62 can be stored as a part of the 
information data 50 in the server device 1 from the 
beginning. 

Fig. 13 shows an example of a process flow of 
processing that is performed by the individual action 

15 instruction means 72 according to the individual action tag 
62 added to the information data 50. This is processing 
that is activated when the communication proxy apparatus 3 
receives the information data 50 from the server device 1 
or another communication proxy apparatus 3. Details of the 

20 processing are shown in Fig. 13. 

In the embodiment shown in Fig. 13, adding the 
individual action tag 62 to the information data 50 enables 
to designate the action to a specific information data. 
Therefore, following benefits are produced: an action can 

25 be changed dynamically for the same information data only 
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by changing the individual action tag 62, which is added, 
beforehand. In addition, if the individual action tag 62 
is not added to received data, the individual action 
definition information 90, which is dynamically registered, 
5 is automatically deleted thanks to the individual action 
tag 62. Therefore deletion of the individual action 
definition information 90, and also cancellation of action 
^ execution, becomes dynamically possible. 

5 The individual action execution means 73 executes an 

5 10 action according to an instruction of each individual 
fjj action definition information 9 0 that is held in the 

s individual action storage means 71 described above. More 

O specifically, during a period specified by the action 

U1 validity term 97 of each individual action definition 

15 information 90, an action specified by the action 
identification information 94 is executed for the 
information data 50, which is specified by a field for the 
information data identifier 41, under conditions specified 
by the action condition 95. 
20 The individual action execution means 73 is utilized 

by two methods. One utilization method is execution of an 
action check for a certain event. In this utilization 
method, when a certain event occurs for certain information 
data 50, the individual action execution means 73 is called 
25 using an access request 40 and event information 98 as 
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parameters. The individual action execution means 73 
checks whether or not execution of the action is required. 
After that, a corresponding action is executed, if necessary 
The parameters used when executing the action are the 
5 access request 40 and the action parameter 96 that is 

defined in the individual action definition information 90. 
As regards the event, there are the following examples: an 
event when the access request 40 for accessing the 
information data 50 is received; an event when a cache 59 
10 is hit and then it is found out that the cache 59 can be 

returned as reply data 61; an event when the reply data 61 
is received; an event when the reply data 61 is 
transmitted; an event when the reply data 61 is cached; and 
the like. 

15 Fig. 14 shows an example of a process flow of action 

check executed by the individual action execution means 73. 
Details of the processing are shown in Fig. 14. 

In the embodiment shown in Fig. 14 , a means for 
handling event information 9 8 as a parameter is provided. 

20 This produces a benefit of enabling an action to be 
executed in response to various kinds of events. 

Another method for utilizing the individual action 
execution means 73 is execution of action check using a 
schedule. In the utilization method, the individual action 

25 execution means 73 is called periodically, or at scheduled 
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time, using a timer 16, or the like. 

Fig. 15 shows an example of a process flow of 
initialization processing for action check using a schedule, 
which is executed by the individual action execution means 
5 73. Because the processing is detailed in Fig. 15, 
description is omitted. 

Fig. 16 shows an example of a process flow of action 
check using a schedule, which is called periodically by a 
timer interrupt using the initialization settings described 
10 above, and which is executed by the individual action 

execution means 73. Details of the processing are shown in 
Fig. 16. 

The embodiment shown in Figs. 15 and 16 has the 
following benefits: an action can be executed periodically 

15 or according to a schedule as conditions for action 

execution; in addition to it, using the action validity 
term 97 in the individual action definition information 90 
enables the individual action definition information 90 to 
be deleted automatically. 

20 The individual action tag adding/removing means 74 

adds the above-mentioned individual action tag 62, or 
removes the attached individual action tag 62 under a 
certain condition, when transmitting from the communication 
proxy apparatus 3 the reply data 61, which is received by 

25 the communication proxy apparatus 3, or the cache 59 of the 



received reply data 61. 

Fig. 17 shows an example of a process flow of 
processing executed by the individual action tag 
adding/ removing means 74 when transmitting the reply data 
61 from the communication proxy apparatus 3. Details of 
the processing are shown in Fig. 17. 

The individual action control means 70 was described 
above. Next, the distributed access control means 80, 
which is another means additional to the communication 
proxy apparatus 3 according to the present invention, will 
be described. 

The distributed access control means 80 comprises an 
access logging instruction means 81, an access logging 
means 82, an access log storage means 83, and a 
hierarchical execution means 84. Moreover, if access 
authority is checked in a distributed manner, the 
distributed access control means 80 additionally has an 
access check means 89 as an option. 

The access log instruction means 81 is a means for 
instructing execution of an access log for an access 
request, which is intended to access the specific 
information data 50 described above. The access logging 
instruction means 81 may be configured to have only a 
function peculiar to this means. However, in the 
embodiment shown in Fig. 1, the above-mentioned individual 
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action control means 70 having more general functions is 
used as the access logging instruction means 81. To be 
more specific, the access logging instruction is realized 
by specifying identification information of the access 
5 logging means 82 as the action identification information 
94, and by specifying the action condition 95 that the 
action to make an access logging should be activated, when 
transmitting reply data in response to an access request 
for information data to be logged. 

10 The access logging means 82 logs an access of the 

proxy apparatus 3, the client device 2, or the user, from 
which the access request is issued, when the communication 
proxy apparatus 3 handles the access request for the 
information data 50, for which an access log is instructed 

15 by the above-mentioned access logging instruction means 81; 
more specifically, when transmitting corresponding reply 
data. In the embodiment shown in Fig. 1, the access 
logging instruction means 81 is realized as an individual 
action using the individual action control means 70. 

20 Because of it, the access logging means 82 is performed by 
the individual action execution means 73. From parameters 
passed from the individual action execution means 73, the 
access logging means 82 Uses the information data 
identifier 41, the original access request issuer 

25 information 42, the accessor information 43, and the 



client/proxy classification 44, which are included in the 
access request 40 parameter, and stores these information 
in the access log storage means 83. 

The access log storage means 83 holds the access log 
85 logged by the access logging means 82. Fig. 18 is a 
configuration example of the access log 85 that is stored 
in the access log storage means 83. This embodiment shows 
an example in which each entry of the access log 85 is 
maintained in the form of a table. The access log 85 
comprises the following: the information data identifier 41 
included in the above-mentioned access request 40; the 
original access request issuer information 42; the accessor 
information 43; the client/proxy classification 44; and 
access time information 86 indicating accessed date and 
time. Fig. 18 shows an example of a specific access log 85, 
which is stored in the access log storage means 83 of the 
communication proxy apparatus 3b in the network 
configuration shown in Fig. 3. In the network 
configuration shown in Fig. 3, the communication proxy 
apparatus 3b is connected to the communication proxy 
apparatus 3a and the communication proxy apparatus 3d, and 
handles the access request 40 from the communication proxy 
apparatus 3a and 3d as an agent. Therefore, all of the 
client/proxy classification 44 fields in the access log 85 
of the communication proxy apparatus 3b have information 



indicating a proxy. Each of the accessor information 43 
fields has identification information of the communication 
proxy apparatus 3a or 3d. In addition, each of the 
original access request issuer information 42 fields has 
information on a user who actually requested the access. 
However, because all of the access requests 40 have not 
always been transmitted to each of the communication proxy 
apparatuses 3, a whole access log of certain information 
data 50 cannot be obtained without aggregating an access 
log of each communication proxy apparatus 3. 

It is to be noted that the example shown in Fig. 18 
is an example of a simple logging method, by which the 
access logging means 82 keeps each access log 85 by 
appending each one to the end of table one by one. 

The hierarchical execution means 84 performs the 
following: receiving an instruction to execute a processing 
request 63 for certain information data 50; referring to 
the access log 85 stored in the above-mentioned access log 
storage means 83; executing the instruction of the process 
request 63 hierarchically for communication proxy 
apparatuses 3 of lower levels, which have accessed the 
information data 50; aggregating execution results 64 that 
have been obtained from its own communication proxy 
apparatus 3 and each of the communication proxy apparatuses 
3 of lower levels; and returning the aggregated result as 



execution result 64 from the own communication proxy 
apparatus 3 * 

Fig. 19 shows an example of a process flow of 
processing performed by the hierarchical execution means 84. 
Details of the processing are shown in Fig. 19. 

As one embodiment of a method for expressing a 
processing request 63 that is passed in processes 171 and 
174, as shown in Fig. 20, for example, it may be a program 
631 to be executed, which is described in various kinds of 
programming languages. Moreover, as shown in Fig. 21, it 
may be identification information 632 of the processing 
program, or parameters 633 for the processing program, 
which is installed in the communication proxy apparatus 3 
beforehand. 

Concerning the method that uses the program itself 
to instruct a specific action as shown in the embodiment in 
Fig. 20, it is not necessary to install processing programs 
to be executed in the communication proxy apparatus 3 
beforehand. Therefore, any kind of processing can be 
performed hierarchically by instructing the processing with 
a program. On the other hand, as regards the embodiment 
shown in Fig. 21, although installation of the processing 
program is required beforehand, only processes installed 
beforehand can be executed. Because of it, security can be 
achieved easily. In addition, because an instruction can 



be given using a small quantity of data including 
identification information of the processing program, and 
parameters to the processing program, high-speed execution 
becomes possible. 

Fig. 22 shows an expression example of an execution 
result 64 returned by a process 175. In this embodiment, 
the execution result 64 comprises the following: a number 
of communication proxy apparatuses 651, which indicates a 
number of communication proxy apparatuses 3 that executes a 
hierarchical process; and individual execution result 
information 652, which indicates individual execution 
result information of each communication proxy apparatus 3 
in a process 172. The individual execution result 
information 652 is repeated a number of times shown in a 
number of communication proxy apparatuses 651. Furthermore, 
the individual execution result information 652, which 
indicates individual execution result information of each 
communication proxy apparatus 3 in the process 172, 
comprises the following: a communication proxy apparatus 
identifier 653, which indicates identification information 
of each communication proxy apparatus 3; a size of 
individual result 654, which indicates a size of an 
individual execution result of the communication proxy 
apparatus 3 obtained by the process 172; and the individual 
result data 655. 



In the embodiment shown in Fig. 22 , for the 
individual execution result information 652 of each 
communication proxy apparatus 3, there is the identifier 
653 of the communication proxy apparatus 3, and the size of 
individual result 654 that indicates a size of the 
individual result data 655. This produces a following 
benefit: corresponding to various kinds of processing, an 
arbitrary communication proxy apparatus 3 can return an 
execution result having an arbitrary size. 

In addition, in one configuration example of the 
access log 85 shown in Fig. 18, the method in which the 
table is extended by each access log is used. However, as 
shown in another configuration example of the access log 85 
in Fig. 23, the following configuration may also be used: 
each access log 85 is stored in a table, in which the 
information data identifier 41 indicating an identifier of 
accessed information data 50 is used as a key; and each 
entry of the table points a list that includes effective 
accessor information 87 and the client/proxy classification 
44 in a pair, the former indicating a device or a user that 
accessed the information * data 50. In this case, the 
effective accessor information 87 is either the original 
access request issuer information 42 or the accessor 
information 43, of the above-mentioned access request. If 
the client/proxy classification 44 is "client", the access 
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request issuer information 42 is set. If the client/proxy 
classification 44 is "proxy", the accessor information 43 
is set. The access logging means 82 adds a new entry to 
the above-mentioned table only if there is no entry 
corresponding to target information data 50 when keeping 
the access log 85. In addition, only if there is no 
corresponding pair information of the effective accessor 
information 43 and the client/proxy distinction 44 in the 
list chained from a corresponding entry, the access logging 
means 82 adds necessary pair information to the list. 

In the embodiment shown in Fig. 23, the 
communication proxy apparatuses 3, which have accessed the 
information data 50 can be found by searching the table 
with the information data identifier 41, and by tracing the 
list. This produces a following benefit: at the time of 
the above-mentioned hierarchical execution, high-speed 
processing is possible to find communication proxy 
apparatuses 3, to which a processing request should be 
transferred hierarchically. 

The access check means 89 is an optional means for 
checking access authority at each communication proxy 
apparatus 3 in a distributed manner. As is the case with 
the access logging means 82, this access check means 89 is 
defined as an individual action for certain information 
data 50, and executed by the individual action execution 



means 73 of the individual action control means 70. As 
described above, parameters at the time of execution by the 
individual action execution means 73 are the access request 
40 and the action parameter 96. In this case, the action 
parameter 96 indicates identification information of a user, 
a group, or a device, for which an access is permitted. 
The access check means 89 uses the original access request 
issuer information 42 and the action parameter 96, which 
are included in the provided access request 40, to inquire 
the user information management server 5 whether or not an 
access is permitted. The user information management 
server 5 manages and authenticates information on user, 
group, and device. 

Fig. 24 is a configuration diagram illustrating a 
network that includes the user information management 
server 5. In this embodiment, the user information 
management server 5 operates on an information processing 
unit 10, which is connected to each of the communication 
proxy apparatuses 3 and the server devices 1 through the 
communication path 4. The user information management 
server 5 is realized with one or more information 
processing units 10 using a distributed database management 
technique as necessary. 

Fig. 25 shows an example of a process flow of the 
access authority check, which is performed when the above- 
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mentioned access check means 89 is invoked from the 
individual action execution means 73. Details of the 
processing are shown in Fig. 25. 

Next, Figs. 26 and 27 shows an example of a process 
flow of processing that is performed by the access request 
agent means 31 according to the present invention. Details 
of the processing are shown in Figs. 26 and 27. 

Next, Fig. 28 shows an example of a process flow of 
a communication agent method that uses a communication 
proxy system configured by the communication proxy 
apparatus 3 according to the present invention in Fig. 1. 
Details of the processing are shown in Fig. 28. 

In the embodiment shown in Fig. 28, in a process 211, 
an individual action for the information data 50 is 
instructed, with an explicit instruction to the 
communication proxy apparatus 3 on the edge of the server 
device side specifying identification information of target 
information data 50. However, a method, in which the 
server device 1 provides information data 50 having an 
individual action tag 62 added beforehand, may also be 
considered . 

Fig. 29 shows an example of a process flow of 
processing according to the method. Details of the 
processing are shown in Fig. 29. A process 221 shown in 
Fig. 29 takes the place of the process 211 shown in Fig. 28. 
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Processes after this are the same as processes 212 through 
218 in Fig. 28. 

Figs. 30 shows a configuration examples of 
information stored in the external storage unit 13 of the 
5 server device 1 according to the present invention, which 
corresponds to Fig. 29. In an embodiment shown in (a) of 
Fig. 30 , an individual action tag 62 is stored as an option, 
while associating the individual action tag with each 
information data 50. In an embodiment shown in (b) of Fig. 

10 30, using the method for expressing the individual action 
tag 62 shown in Fig. 12, where said individual action tag 
62 can be integrated with the information data 50, the 
individual action tag 62 is attached to the information 
data 50, and is managed as a part of the information data 

15 50 . 

As regards the embodiments shown in Figs. 28 and 29, 
an individual action specified in each communication proxy 
apparatus 3 can be executed. Therefore, both of the 
embodiments are the same on that point. However, according 

20 to the embodiment in Fig. 28, the individual action can be 
executed without changing the information data 50 on the 
server device 1 side. On the other hand, the embodiment in 
Fig. 29 has a following benefit: the individual action can 
be executed regardless of which server device 1 the 

25 information data 50 with the individual action tag 62 is 
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placed on, and it is not necessary to find which 
communication proxy apparatus 3 is an edge communication 
proxy apparatus 3 for the server device 1. 

Next, a process flow of the access request 40, which 
requests to access the information data 50 on the server 
device 1, from the client device 2 will be described with 
reference to Figs. 31 through 36, taking the network 
configuration shown in Fig. 3 as an example. In order to 
make explanation simpler, it is assumed that target 
information data 50 can be cached, and that no individual 
action tag 62 is attached to the information data 50 stored 
in the server device 1 . 

In the first place, a process flow of a first time 
access request to the information data from the client 
device 2a will be described with reference to Figs. 31 and 
32, where each communication proxy apparatus 3 does not 
have a corresponding cache 59. Fig. 31 is a schematic 
diagram illustrating a process flow for a case where each 
communication proxy apparatus 3 does not have a 
corresponding cache 59. Fig. 32 describes details of each 
process shown in Fig. 31. Details of the processes are 
shown in Fig. 32. 

In the description of the above-mentioned embodiment, 
if an individual action tag 62 is attached to the 
information data 50 stored in the server device la 
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beforehand, reply data 61, which is returned from the 
server device 1 and includes the individual action tag 62, 
is transmitted to the communication proxy apparatus 3c as 
it is in a process 305, and the communication proxy 
5 apparatus 3c executes an action corresponding to the 
individual action tag 62 in a process 306. 

Next, a process flow for a case where the same 
client device 2a issues another access request 40 to the 
communication proxy apparatus 3a again, requesting for an 
10 access to the same information data 50 of the same server 
device la, (that is to say, for a case where there is 
corresponding cache 59) will be described with reference to 
Figs. 33 and 34. Fig. 33 is a schematic diagram 
illustrating a process flow for a case where an edge 
15 communication proxy apparatus on the client side has a 

cache 59 corresponding to an access request 40. Fig. 34 
describes details of each process shown in Fig. 33. 
Details of the processes are shown in Fig. 34. Moreover, 
with reference to Figs. 35 and 36, a process flow for a 
20 case where another client device 2d issues an access 

request 40 to the same information data 50 of the same 
server device la will be described. Fig. 35 is a schematic 
diagram of a process flow illustrating the client device, 
the communication proxy apparatus, and the server device, 
25 at the time of a cache hit for the access request 40 from 
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another client device 2d. Fig. 36 describes details of 
each process shown in Fig. 35. Details of the processes 
are shown in Fig. 36. 

Figs. 9 and 12 described above show the embodiment 
5 that specifies action information 93 with the action 

identification information 94, which identifies the means 
installed beforehand, assuming that a process to be 
executed as an individual action is installed beforehand in 
the communication proxy apparatus 3. However, as is the 
10 case with the embodiment of the above-mentioned 

hierarchical execution, there is also an embodiment that 
uses action program information 79, which uses various 
kinds of programming languages to describe individual 
action process itself, instead of the action identification 
15 information 94. Fig. 37 shows a configuration example of 
the individual action tag 62 that uses the action program 
information 79. In this embodiment, a portion, which 
corresponds to the action identification information 94 in 
Fig. 12, is described as action program information 79 that 
20 uses a programming language. 

In addition, Fig. 38 shows a configuration example 
of individual action definition information 90 to be held 
in the individual action storage means 71, for a case where 
the action program information 79 is used. In this 
25 embodiment, each action program information 79, which is 
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explicitly instructed using information data identifier 41 
or is instructed by the above-mentioned individual action 
tag 62, is stored in a part of the individual action 
storage means 71 by the individual action instruction means 
5 72. Moreover, an entry address information 78 field is 
provided instead of a field that is equivalent to the 
action identification information 94 of the individual 
action definition information 90 shown in Fig. 9. When the 
individual action instruction means 72 stores each action 

10 program information 79 in the individual action storage 

means 71, address information on an entry point of each of 
the action program information 79 is registered in the 
field. When executing an action, information specified in 
the entry address information 7 8 is used to execute 

15 corresponding action program information 79. 

Additionally, as another embodiment, there is also 
the following method: while keeping the individual action 
definition information 90 in Fig. 9 as it is, means are 
added to the communication proxy apparatus 3 for 

20 dynamically loading action program information to be 

executed as an individual action and for associating the 
program information 79 with action identification 
information 94. 

Fig. 39 is a configuration diagram illustrating the 

25 communication proxy apparatus 3 having a program load means 
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75, according to the present invention. In this embodiment, 
means and a table, which are newly added to the 
communication proxy apparatus 3 shown in Fig. 1, are the 
program load means 75, a program storage means 76, and an 
5 action program correlation table 77. In the first place, 
the program storage means 7 6 is a means for holding loaded 
action program information 79. As shown in Fig. 40, the 
jM action program correlation table 77 holds a relationship 

2 between the action identification information 94 and the 

C3 

51 10 entry address information 7 8 of the loaded action program 
J' information 79. In the same form, the table 77 also 

f*g manages the access logging means 82, and the access check 

yl means 89 which are provided in the distributed access 

hk control means 80. When the individual action control means 

15 70 executes an action, the individual action control means 
70 refers to the action program correlation table 77, finds 
out an entry address of a program, which should be executed, 
using the action identification information 94 described in 
the individual action definition information 90, and 
20 thereby executes the corresponding program. The program 

load means 75 receives an instruction from an operator, or 
the like, loads a program for action, and then associates 
it with specified action identification information 94. 
Fig. 41 shows an example of a process flow of a 
25 program loading process executed by the program load means 
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75. Details of the process are shown in Fig. 41. 

According to the embodiment shown in Figs. 37 
through 41, a following benefit is produced: dynamical 
loading becomes possible without installing processing 
5 means for executing individual actions beforehand to each 
communication proxy apparatus 3. In addition, according to 
the embodiment shown in Figs. 39 and 40, a benefit of 
fl reducing a quantity of data of the individual action tag 62 

yl added to the information data 50 is produced, which enables 

Q 10 high-speed agent processing. Moreover, as shown in the 
FM. embodiment in Fig. 40, the following benefit is produced: 

f treating a built-in action likewise enables a built-in 

M action program to be coexistent with an action program that 

i;J is loaded dynamically. 

15 According to the -present invention, following 

benefits are produced: it is possible to obtain an access 
log for specific information data in each of the 
communication proxy apparatuses 3 in a distributed manner 
without changing the server device 1 or the client device 2, 
20 by instructing' an edge communication proxy apparatus 3 on 
the server device side, which is connected directly to the 
server device 1 through communication path 4 , to keep the 
access log as an individual action for the specific 
information data, or by adding an individual action tag, 
25 which instructs each communication proxy apparatus 3 to 
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keep the access log, to the information data of the server 
device 1 . 

In addition, if the edge communication proxy 
apparatus 3 on the server device side described above is 
5 instructed to collect the access logs for the target 
information data hierarchically, it is possible to 
aggregate and collect the access logs for the information 
data 50 , each of which has been kept by each of the 
communication proxy apparatuses in a distributed manner, by 

10 inquiring of only communication proxy apparatuses that have 
accessed the information data. 

Moreover, when updating the information data on the 
server device 1, if the edge communication proxy apparatus 
3 on the server device side, which is directly connected to 

15 the server device 1 through communication path 4, is 
instructed to update a cache hierarchically with 
reacquisition of the information data 50, it is possible to 
update the cache 59 of each communication proxy apparatus 3 
that holds the cache of the information data 50. 

20 In addition, as an another method for updating the 

cache of each communication proxy apparatus 3, by 
instructing the scheduled reacquisition of the information 
data 50 as an individual action for the specific 
information data 50, it is possible to update the cache 59 

25 for the information data 50 in each communication proxy 
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apparatus periodically . 

In addition, as an individual action for the 
specific information data, if the edge communication proxy 
apparatus 3 on the server device side, which is directly 
connected to the server device 1 through communication path 
4, is instructed to perform an access check, having an 
accessible user, device or group of users/devices 
information as an action parameter, or if an individual 
action tag, which instructs to perform the access check 
having the same action parameter, is attached to the 
information data of the server device 1, a following 
benefit is produced: only for the user, the device or the 
group of users/devices specified, it is possible for each 
communication proxy apparatus 3 to permit an access to the 
information data 50, and to return the cache 59 of the 
information data 50, without changing the server device 1 
or the client device 2, and without always transmitting 
each access check request to the server device 1. 

To be more specific, the communication proxy system 
according to the present invention is characterized in 
that: 

in a network system in which information data held 
in a server device is accessed from a client device through 
the communication line, one or more proxy devices are 
provided between the server device and the client device as 
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the devices for agent-relaying communication between the 

server device and the client device; 

in addition, an edge communication proxy apparatus 

on the client side or on the server device side, which is 
5 directly connected to the client device or the server 

device through a communication path without passing through 

other communication proxy apparatuses, is configured by a 
yp communication proxy apparatus comprising the above- 

*8 mentioned individual action tag adding/removing means. 

JJ{ 10 In addition, the communication agent method 

hU - according to the present invention is characterized in 

that: 

7n in the above-mentioned communication proxy system, 

and in the edge communication proxy apparatus on the server 

15 device side described above, when information data received 
by the communication proxy apparatus from the server device 
and additional data received together with the information 
data are transmitted to another communication proxy 
apparatus, if identification information -of the information 

20 data and individual action definition information for the 

information data are registered in the action storage means 
by explicit instruction, an individual action tag 
indicating action information corresponding to the 
information data is added to the information data before 

25 transmitting the information data; and 
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in the edge communication proxy apparatus on the 
client device side, when information data received from the 
server device or from another communication proxy apparatus 
and additional data received together with the information 
5 data are transmitted to the client device, if there is an 
individual action tag in the additional data, the 
communication proxy apparatus removes the individual action 
tag before transmitting the information data and the 
additional data. 

10 In addition, the communication proxy system and the 

communication agent method according to the present 
invention are characterized in that: 

in the above-mentioned communication proxy system, 
each communication proxy apparatus is configured as a 

15 communication proxy apparatus comprising both of the 

individual action control means and the distributed access 
control means described above; 

to begin with, through an individual action 
instruction means, the edge communication proxy apparatus 

20 on the server device side described above, is explicitly 
instructed beforehand an individual action to be executed 
for the information data with an identification information 
of the target information data; 

next, the information data is accessed by the client 

25 devices for a certain time period; 
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then, the edge communication proxy apparatus on the 
server device side is instructed to execute a certain 
process for the information data using a hierarchical 
execution means ; 

and the instructed process is executed 
hierarchically for a group of communication proxy 
apparatuses that have actually accessed the information 
data . 

In addition, the communication proxy system and the 
communication agent method according to the present 
invention are characterized in that: 

as an instruction of hierarchical execution given to 
the edge communication proxy apparatus on the server device 
side, an individual action deletion process for deleting 
individual action definition information of certain 
information data from the above-mentioned individual action 
storage means is instructed; and 

individual action definition information of the 
information data held in the individual action storage 
means of each communication proxy apparatus, which has 
accessed the information data, is deleted. 

In addition, the communication proxy system and the 
communication agent method according to the present 
invention are characterized in that: 

as an instruction of hierarchical execution given to 



the edge communication proxy apparatus on the server device 
side, an access log deletion process for deleting an access 
log of certain information data from the above-mentioned 
access log storage means is instructed; and 

an access log of the information data held in the 
access log storage means of each communication proxy 
apparatus, which has accessed the information data, is 
deleted . 

As regards an aggregation process for collecting an 
access log, the access log of the information data held in 
each communication proxy apparatus, which has accesses the 
information data, can be aggregated by instructing the 
hierarchical execution means of the edge communication 
proxy apparatus on the server device side to aggregate the 
access log of the target information data. The 
communication proxy apparatus, which has received a request 
for the aggregation process, obtains an access log of 
specified information data held by the communication proxy 
apparatus, and transfers the aggregation process to the 
lower level communication proxy apparatuses for which any 
access log of the information data is logged in the 
communication proxy apparatus, and executes the aggregating 
process hierarchically. Results of the aggregation process 
obtained from the lower level communication proxy 
apparatuses are aggregated to the access log in own 
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communication proxy apparatus, and the aggregated result is 
returned as an execution result of the own communication 
proxy apparatus. Finally, information on all access logs 
of the target information data can be obtained from the 
edge communication proxy apparatus on the server device 
side described above. 

More specifically, the communication agent method 
according to the present invention is characterized in 
that: 

as an individual action for target information data, 
the individual action instruction means of the 
communication proxy apparatus on the server device side is 
instructed beforehand to keep an access log using the 
access logging means; and 

after the information data is accessed from the 
client devices for a certain time period, as a process for 
instructing the hierarchical execution means of the edge 
communication proxy apparatus on the server device side, an 
aggregation process for aggregating the access log of the 
information data is instructed; and 

all access logs for the information data are 
aggregated . 

The problem of cache update can be solved by the 
following: in the first place, as an action, instructing an 
individual action instruction means of the edge 



communication proxy apparatus on the server device side to 
log accesses to the target information data; and 
instructing a hierarchical execution means of the edge 
communication proxy apparatus to reacquire the information 
data immediately after updating the information data by the 
server device. To be more specific, according to the 
reacquisition instruction given to this edge communication 
proxy apparatus, in the first place, the edge communication 
proxy apparatus requests the server device to reacquire the 
target information data; a cache of the communication proxy 
apparatus is updated; using the hierarchical execution 
function of the hierarchical execution means, the 
reacquisition request is transferred hierarchically to the 
communication proxy apparatuses, which have accessed the 
information data, one after another; and the cache of each 
communication proxy apparatus is updated to the latest data 
hierarchically* 

More specifically, the communication proxy system 
and the communication agent method according to the present 
invention are characterized in that: 

the communication proxy apparatus further comprises 
a caching means for managing the information data, which 
has been obtained from the server device or from another 
communication proxy apparatus by the access request agent 
means, and added data of the information data, as a cache; 



the access request agent means of the communication 
proxy apparatus receives an access request for an access to 
the information data from the client device or another 
communication proxy apparatus; 

to begin with, the cache, which is kept in the 
caching means, is checked for the access request; 

under a certain condition, a request is not issued 
to the server device or another communication proxy 
apparatus, and information held as a cache is used as a 
reply data for the access request; 

under the other conditions , the information data and 
added data of the information data are obtained as a reply 
data by requesting the server device or another 
communication proxy apparatus; 

next, an individual action tag included in the reply 
data is checked using the individual action instruction 
means, and individual action definition information is 
registered using the found individual action tag; 

in addition, the reply data is held as a cache as 
necessary using the caching means; 

moreover, in the process of the above-mentioned 
processing, an individual action required for the 
information data is executed with an appropriate timing 
using the individual action execution means; and 

furthermore, the individual action tag is added to, 



or removed from, the reply data using an individual action 
tag adding/removing means, and data obtained as a result is 
returned to a requester. 

In addition, the communication agent method 
according to the present invention is characterized in 
that: 

as an individual action for target information data, 
the individual action instruction means of the 
communication proxy apparatus on the server device side is 
instructed beforehand to keep an access log using the 
access logging means; and 

after the information data is accessed from the 
client devices for a certain time period, as a process for 
instructing the hierarchical execution means of the edge 
communication proxy apparatus on the server device side, 
reacquisition of the information data and attribute 
information of the information data is instructed; and 

each communication proxy apparatus, in which an 
access log for the information data is kept, thereby 
reacquires the information data and the attribute 
information of the information data hierarchically to 
update the cache of each communication proxy apparatus 
relating to the information data. 

In addition, the communication agent method 
according to the present invention is characterized in 
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that: 

each communication proxy apparatus is provided with 
a reacquisition means for reacquiring information data; 

as an individual action for target information data, 
the communication proxy apparatus on the server device side 
is instructed through the individual action instruction 
means to execute the reacquisition means for reacquiring 
the information data using a schedule; 

each communication proxy apparatus, which has 
accessed the information data, reacquires the information 
data and the attribute information of the information data 
automatically according to the schedule to update the cache 
of the communication proxy apparatus relating to the 
information data . 

In addition, as is the case with the access log, a 
distributed checking of access authority is realized by 
instructing action information for executing the access 
check means when handling an access request, as an 
individual action using information such as an accessible 
user, group or device as an action parameter. To be more 
specific, the check can be performed by giving beforehand 
the edge communication proxy apparatus on the server device 
side an explicit instruction including identification 
information of the target information data and the action 
information to instruct execution of an individual action 
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for the information data, or by attaching beforehand an 
individual action tag indicating the action information to 
the information data on the server device. 

More specifically, the communication agent method 
according to the present invention is characterized in 
that: 

the individual action definition information is 
provided with action parameter information indicating 
parameters for the individual action; 

in addition, as a processing means to be executed as 
an the individual action, each communication proxy 
apparatus is provided with an access check means for 
permitting an access to the information data, for which 
access check action is defined, only from a specific user, 
a specific device, or a specific group of users or devices 
according to the information specified in the action 
parameter information; and 

action information, which specifies the access check 
means as an individual action to be executed, and the 
information can access as the action parameter information, 
is added beforehand as an individual action tag to specific 
information data which is returned from the server device; 
or 

explicit instruction including the action 
information and identification information of the target 
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information data are given to an individual action 
instruction means of the edge communication proxy apparatus 
on the server device side to limit an access to the 
information data. 
5 In addition, the communication proxy system and the 

communication agent method according to the present 
invention are characterized in that: 

instead of giving instruction of an individual 
action for the specific information data to the edge 
10 communication proxy apparatus on the server device side 

beforehand, data having an individual action tag attached 
to the information data is prepared using a tool for adding 
the individual action tag to the information data; 

the data with the individual action tag attached is 
15 held in the server device; and 

in response to the access request, the server device 
returns the data with the individual action tag attached as 
reply data for the access request. 

In addition, the communication proxy system 
20 according to the present invention are characterized in 
that: 

the individual action instruction means comprises a 
means for holding an instruction of an action, which should 
be executed for specific information data, as a form of 
25 processing program; and 



the individual action execution means comprises a 
means for executing the held processing program as an 
individual action for the information data. 

In addition, the above-mentioned communication proxy 
apparatus is characterized in that: 

the communication proxy apparatus comprises: 

a program load means for loading a processing 
program; a program storage means for storing the loaded 
program; % 

and an action program correlation table that holds a 
relationship between a program entry address and action 
identification information; 

the program load means comprises: 

a means for receiving an instruction including 
action identification information and program information 
to be loaded, and for storing the program information in 
the program storage means; and 

a means for registering a relationship between an 
entry address of the stored program information and 
specified action identification information in the action 
program correlation table ; and 

the individual action control means uses the 
information registered in the action program correlation 
table to execute the corresponding individual action 
program* 
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In addition, the communication proxy system and the 
communication agent method according to the present 
invention are characterized in that: 

as regards an action to be executed as an individual 
5 action, a processing program and action identification 

information are instructed to the program load means of the 
communication proxy apparatus; 

the action processing program is loaded beforehand 
while the action processing program is associated with the 
10 instructed action identification information; and 

an instruction of the action identification 
information is given to the individual action instruction 
means to execute the individual action for the target 
information data. 
15 As described above, according to the present 

invention, in response to an access request for an access 
to information data from the client devices, it is possible 
to provide a communication proxy apparatus, a communication 
proxy system, and a communication agent method, which are 
20 suitable for realizing an access to latest information data 
at high speed by making full use of a cache without 
changing the server device or the client device, and for 
realizing high-speed access control by an easy instruction. 
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What is claimed is : 



1 . A communication proxy apparatus comprising an 
access request agent means, wherein: 

said access request agent means, which is placed on 
a communication path between a server device and a client 
devices; receives an access request for an access to 
information data held in the server device from the client 
device or other communication proxy apparatuses; issues the 
access request, as an agent, to the server device or still 
another communication proxy apparatus; obtains the 
requested information data and attribute information of the 
information data; and returns the obtained data; and 

said communication proxy apparatus has an individual 
action control means comprising: 

an individual action storage means for holding 
individual action definition information indicating a 
relationship between the information data and action 
information that indicates an action to be executed for the 
specific information data processed by the communication 
proxy apparatus as an agent, and that indicates execution 
conditions of the action; 

an individual action instruction means for 
registering individual action definition information in the 
individual action storage means; and 



72 



an individual action execution means for executing 
an individual action for the information data, which is 
instructed by the individual action definition information, 
under instructed conditions. 

2. A communication proxy apparatus according to 
Claim l r wherein: 

said individual action instruction means comprises a 
means by which, if registration in the individual action 
storage means is instructed by an explicit instruction 
containing identification information of target information 
data and action information to be executed for the 
information data, or if as a result of checking information 
data received by the communication proxy apparatus, it is 
found out that an individual action tag for instructing 
action information to be executed for the information data 
is added to the information data, individual action 
definition information of the information data is 
registered in the individual action instruction storage 
according to the action information; and 

the individual action tag control means comprises an 
individual action tag adding/removing means for adding the 
individual action tag or removing the added individual 
action tag, under a certain condition, when transmitting 
from the communication proxy apparatus the information data 
received by the communication proxy apparatus , and the 



added data received together with the information data. 

3. A communication proxy apparatus according to 
Claim 2, wherein: 

said individual action definition information 
comprises an action type classification information for 
specifying that the individual action definition 
information is registered according to identification 
information of target information data and explicit 
instruction of action information, or that the individual 
action definition information is registered by an 
individual action tag added to the information data; 

the individual action instruction means comprises a 
means for registering the action type classification 
information when individual action definition information 
of each information data is registered in an action storage 
means ; and 

the individual action tag adding/removing means 
comprises a means for adding an individual action tag 
corresponding to the information data before transmitting 
the information data, when for the information data 
transmitted from the communication proxy apparatus, the 
identification information of the information data and 
individual action definition information explicitly 
specified by action information is stored in the action 
storage means. 
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4 . A communication proxy apparatus according to 
Claim 2, wherein: 

the individual action tag adding/removing means 
comprises a means for removing the individual action tag 
5 before transmitting the information data, when the 

communication proxy apparatus transmits information data 
with the individual action tag added, and if the 
destination is said client devices. 

5. A communication proxy apparatus comprising an 
10 access request agent means, wherein: 

said access request agent means, which is placed on 
a communication path between a server device and client 
devices; receives an access request for an access to 
information data held in the server device from the client 

15 device or other communication proxy apparatuses; issues the 
access request, as an agent, to the server device or still 
another communication proxy apparatus; obtains the 
requested information data and attribute information of the 
information data; and returns the obtained data; and 

20 said communication proxy apparatus has a distributed 

access control means comprising: 

an access logging instruction means for instructing 
the communication proxy apparatus to keep an access log of 
an access request for specific information data; 

25 an access logging means for logging an access by a 
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device or a user from which an access request is issued, 
when the communication proxy apparatus handles the access 
request for information data for which an access log is 
instructed by the access logging instruction means; 

an access log storage means for holding a access log 
kept by the access logging means; 

a hierarchical execution means for: receiving a 
processing request instruction for specific information 
data; executing the instructed processing request for the 
instructed information data; transferring the processing 
request instruction to communication proxy apparatuses of 
lower levels, of which the access log storage means keeps 
an access log for the instructed information data; after 
executing the processing request hierarchically, 
aggregating execution results obtained from the 
communication proxy apparatuses of lower levels and an 
execution result of own communication proxy apparatus ; and 
returning the aggregated results. 

6. A communication proxy apparatus according to 
Claim 5, said communication proxy apparatus comprising: 

an access logging means for logging an access by a 
device or a user from which an access request is issued, 
when the communication proxy apparatus handles the access 
request for information data for which an access log is 
instructed; 



an access log storage means for holding an access 
log kept by the access logging means; 

a means by which when receiving an processing 
request instruction for specific information data, the 
instructed processing request for the instructed 
information data is executed; and a hierarchical execution 
means , 

said hierarchical execution means comprising: 
a means for transferring the processing request 
instruction to communication proxy apparatuses of lower 
levels, of which the access log storage means of the 
communication proxy apparatus stores an access log for the 
instructed information data; and 

a means for aggregating execution results obtained 
from the communication proxy apparatuses of lower levels 
and an execution result in own communication proxy 
apparatus, and for returning the aggregated result, after 
the processing request is executed hierarchically, wherein 
the individual action instruction means has a means 
for instructing execution of the access logging means with 
timing of access . request processing for the information 
data, as the individual action for the information data 
that is an access-log target, in response to an access 
request for the specific information data. 

7 . A communication proxy apparatus according to 
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Claim 1, wherein: 
- , the individual action control means further 

comprises a means for holding action expiration time 
information representing expiration time of the individual 
5 action definition information as the individual action 
definition information; and 

the individual action execution means comprises a 
y means for executing an action defined by the individual 

action definition information before expiration time 

%y 
fl 

m 10 indicated by the action expiration time information, and 

fjj 

fpf for deleting the individual action definition information 

§=4 automatically after the expiration time. 

O 8. A communication proxy apparatus according to 

□ Claim 1, wherein: 

15 said individual action definition information 

comprises an action type classification information for 
specifying that the individual action definition 
information is registered according to identification 
information of target information data and explicit 
20 instruction of action information, or that the individual 
action definition information is registered by an 
individual action tag added to the information data; and 
said individual action instruction means comprises: 
a means for registering the action type 
25 classification information when individual action 
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definition information of each information data is 
registered in the action storage means; 

a means by which whether or not an individual 
action tag has been added to received information data is 
checked, and if the individual action tag is not added, 
whether or not an individual action definition information 
is held in the individual action storage means is checked; 
and 

a means by which if individual action definition 
information corresponding to the information data exists, 
and if it is found out that the individual action 
definition information has been registered using an 
individual action tag judging from the action type 
classification information of the individual action 
definition information, the individual action definition 
information is deleted. 

9. A communication proxy apparatus according to 
Claim 1, wherein: 

the individual action instruction means comprises a 
means for holding an action instruction, which should be 
executed for specific information data, as a form of 
processing program; and 

the individual action execution means comprises a 
means for executing the held processing program as an 
individual action for the information data. 
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10. A communication proxy apparatus according to 
Claim 1, wherein: 

said communication proxy apparatus comprises: 
a program load means for loading a processing 

program in the communication proxy apparatus; 

a program storage means for storing a loaded 

program ; 

and an action program correlation table that holds 
relationship between a program entry address and action 
identification information ; 

said program load means comprises: 

a means for receiving an instruction including 
action identification information and program information 
to be loaded, and for storing the program information in 
the program storage means ; and 

a means for registering a relationship between an 
entry address of the stored program information and 
specified action identification information in the action 
program correlation table; and 

the individual action control means uses the 
information registered in the action program correlation 
table to execute the corresponding individual action 
program . 

11. A communication proxy apparatus comprising an 
access request agent means, wherein: 
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said access request agent means, which is placed on 
a communication path between a server device and client 
devices; receives an access request for an access to 
information data held in the server device from the client 
device or other communication proxy apparatuses; issues the 
access request, as an agent, to the server device or still 
another communication proxy apparatus; obtains the 
requested information data and attribute information of the 
information data; and returns the obtained data; and 

said communication proxy apparatus has a distributed 
access control means comprising: 

an access logging instruction means for 
instructing the communication proxy apparatus to keep an 
access log of an access request for specific information 
data ; 

an access logging means for logging an access by a 
device or a user from which an access request is issued, 
when the communication proxy apparatus handles the access 
request for information data for which an access log is 
instructed by the access logging instruction means; 

an access log storage means for holding an access 
log kept by the access logging means; and 

a hierarchical execution means for: receiving a 
processing request instruction for specific information 
data; executing the instructed processing request for the 



81 



instructed information data; transferring the processing 
request instruction to communication proxy apparatuses of 
lower levels, of which the access log storage means keeps 
an access log for the instructed information data; after 
executing the processing request hierarchically, 
aggregating execution results obtained from the 
communication proxy apparatuses of lower levels and an 
execution result of own communication proxy apparatus; and 
returning the aggregated results. 
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ABSTRACT 

An object of the present invention is to provide a 
communication proxy apparatus that achieves a high-speed 
access to latest information by making full use of a cache 
data in response to an access request for the information 
data without changing a server device or a client device, 
and that realizes high-speed access control using a simple 
instruction. 

The communication proxy apparatus additionally 
comprises : 

an individual action control means for conditionally 
instructing execution of an action by explicitly 
instructing identification information of specific 
information data, or by adding the information data and an 
individual action tag to reply data received from another 
device; and 

a distributed access control means for performing 
the following: keeping an access log for the specific 
information data using said means; referring to the log; 
executing the instructed process for the communication 
proxy, which has accessed the information data; aggregating 
execution results; and returning the aggregated result. 
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FIG. 8 



( START ) 



YES 





r 


RECEIVE ACCESS REQUEST 40 TO A CERTAIN INFORMATION 
DATA 50 FROM A CLIENT DEVICE OR ANOTHER COMMUNICATION 
PROXY APPARATUS. 




r 


REQUEST CORRESPONDING CACHE 59 TO THE CACHE CONTROL 
MEANS 34 WITH SPECIFYING AN INFORMATION DATA IDENTIFIER 41 
GIVEN BY ACCESS REQUEST 40. 




r 



101 



102 



CAN IT BE DETERMINED THAT THE CORRESPONDING CACHE 59 
EXISTS AND THE CACHE 59 IS VALID CONSIDERING CACHE EXPIRATION 
TIME INFORMATION 54 ETC. INCLUDED IN ATTRIBUTE INFORMATION 
51 OF THE INFORMATION DATA 50 HELD IN THE CACHE 59 ? 



-103 



NO 



TRANSMIT THE SPECIFIED ACCESS REQUEST 40 TO A SERVER DEVICE 
OR ANOTHER COMMUNICATION PROXY APPARATUS, AND OBTAIN 
REPLY DATA 61 CONTAINING REQUESTED INFORMATION DATA 50 AND 
ATTRIBUTE INFORMATION 51 OF THE INFORMATION DATA 50. 



104 



REFER TO THE ATTRIBUTE INFORMATION 51 OF THE INFORMATION 
DATA CONTAINED IN REPLY DATA 61 OBTAINED BY PROCESS 104, 
AND REQUEST CACHE CONTROL MEANS 34 TO HOLD THE REPLY 
DATA 61 AS A CACHE 59 UNLESS NON-CACHEABLE ATTRIBUTE IS 
SPECIFIED IN CACHING POSSIBILITY INFORMATION 53. 



-105 



RETURN THE CACHE 59 OBTAINED BY PROCESS 103 OR REPLY 
DATA OBTAINED BY PROCESS 105 TO THE REQUESTER AS FINAL 
REPLY DATA 61. 
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( END ) 
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FIG. 10 



( START ) 



1 




RECEIVE AN INFORMATION DATA IDENTIFIER 41 OF THE TARGET INFOR- 
MATION DATA 50 AND ACTION INFORMATION 93 TO BE EXECUTED FOR 
THE INFORMATION DATA 50 FROM THE OPERATOR ETC. 




r 



111 



YES / SEARCH A TABLE STORED IN INDIVIDUAL ACTION STORAGE 



MEANS 71 WITH THE SPECIFIED 
AS A KEY. WAS A CORRESPOND 



NFORMATION DATA IDENTIFIER 41 
NG ENTRY FOUND ? 



NO 



CREATE A NEW ENTRY, AND REGISTER THE SPECIFIED 
INFORMATION DATA IDENTIFIER 41 IN AN INFORMATION DATA 
IDENTIFIER FIELD OF THE ENTRY. 
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113 



REGISTER THE SPECIFIED ACTION INFORMATION 93 INTO THE 
ENTRY FOUND IN PROCESS 112 OR INTO THE ACTION 
INFORMATION FIELD OF THE ENTRY CREATED IN PROCESS 113. 



114 



FINALLY SET AN ACTION TYPE CLASSIFICATION INFOMATION FIELD 92 
OF THE ENTRY WITH THE CLASSIFICATION INFORMATION REPRESENTING 
THAT THIS ENTRY IS SET BY AN EXPLICIT INSTRUCTION FROM THE 
OPERATOR ETC. WITH THE INFORMATION DATA IDENTIFIER 41. 
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FIG. 13 

( START ) 



-121 



NO 



YES, 



NO 



CHECK IF AN INDIVIDUAL ACTION TAG 62 IS ATTACHED TO THE RECEIVED 
INFORMATION DATA 50. IS AN INDIVIDUAL ACTION TAG 62 ATTACHED ? 



YES 



'SEARCH A TABLE STORED IN THE INDIVIDUAL ACTION STORAGE MEANS 
71 WITH AN IDENTIFIER 41 CORRESPONDING TO THE INFORMATION 
DATA 50 AS A KEY. WAS A CORRESPONDING ENTRY FOUND ? 



-122 



NO 



CREATE A NEW ENTRY, AND REGISTER THE SPECIFIED INFORMATION 
DATA IDENTIFIER 41 IN AN INFORMATION DATA IDENTIFIER FIELD OF 
THE ENTRY. 



123 



REGISTER THE ACTION INFORMATION 93 SPECIFIED BY THE 
INDIVIDUAL ACTION TAG 62 WHICH WAS FOUND IN PROCESS 121, 
INTO THE ENTRY FOUND IN PROCESS 122 OR INTO THE ACTION 
INFORMATION FIELD OF THE ENTRY CREATED IN PROCESS 123. 



124 



SET AN ACTION TYPE CLASSIFICATION INFORMATION 92 FIELD OF THE 
FOUND ENTRY WITH THE CLASSIFICATION INFORMATION REPRESENTING 
THAT THIS ENTRY IS REGISTERED BY AN INDIVIDUAL ACTION TAG 62. 



IS 



125 



SEARCH A TABLE STORED IN THE INDIVIDUAL ACTION STORAGE 
MEANS 71 WITH AN INFORMATION DATA IDENTIFIER 41 CORRES- 
PONDING TO THE RECEIVED INFORMATION DATA 50 AS A KEY. 
WAS A CORRESPONDING ENTRY FOUND ? 
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1 


YES 

r 


DELETE THE ENTRY IF THE ACTK 
MATION 92 INDICATES THAT THE 
INDIVIDUAL ACTION TAG. 


DN TYPE CLASSIFICATION INFOR- 
ENTRY WAS REGISTERED BY AN 



127 



( END ) 
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NO, 



NO 



NO. 



m m m m I 




RECEIVE AN ACCESS REQUEST 40 AND AN EVENT REQUEST 98 
PASSED FROM THE ACCESS REQUEST AGENT MEANS 31. 







'SEARCH A TABLE OF THE INDIVIDUAL ACTION DEFINITION INFORMA- 
TION 90 STORED IN THE INDIVIDUAL ACTION STORAGE MEANS 71 WITH 
AN INFORMATION DATA IDENTIFIER 41 CONTAINED IN RECEIVED ACCESS 
REQUEST 40 AS A KEY. WAS A CORRESPONDING ENTRY FOUND ? 



131 



•132 



YES 



COMPARE ACTION VALIDITY TERM 97 WITH CURRENT TIME. 
IS CURRENT TIME WITHIN THE VALIDITY TERM ? 



YES 



COMPARE AN ACTION IDENTIFIER 95 OF THE FOUND ENTRY WITH 
THE EVENT INFORMATION PASSED AS A PARAMETER, AND JUDGE 
IF ACTION EXECUTION IS NECESSARY. 
IS ACTION EXECUTION NECESSARY ? 
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-134 



YES 



REFER TO AN ACTION IDENTIFIER 94 OF THE FOUND ENTRY, ACTIVATE 
THE RELEVANT ACTION BASED ON THE ACCESS REQUEST 40 AND THE 
ACTION PARAMETER 97 OF THE ENTRY, AND RETURN AN EXECUTION 
RESULT 67 OF THE ACTION TO ACCESS REQUEST AGENT MEANS 31. 



135 



RETURN WITH NORMAL TERMINATION 
STATUS WHICH DENOTES ABSENCE OF 
CORRESPONDING ACTION AS EXECUTION 
RESULT 67 OF THE ACTION TO THE 
ACCESS REQUEST AGENT MEANS 31. 



C 



-136 



END 



J 



FIG. 15 C^D 



141 



PREPARE A STORAGE AREA FOR A PREVIOUS CHECK TIME VARIABLE FOR 
STORING THE TIME OF PREVIOUS SCHEDULE CHECK EXECUTION, AND STORE 
TIME VALUE GUARANTEED TO BE EARLIER ENOUGH THAN THE TIME USED IN 
THE SCHEDULE EXECUTION INTO THE VARIABLE AS AN INITIAL VALUE. 



142 



SET A TIMER 16 SO AS TO PERIODICALLY CALL AN ACTION CHECK 
EXECUTION PROCESSING BASED ON THE SCHEDULE OF THE 
INDIVIDUAL ACTION EXECUTION MEANS 73. 



C 



END 



J 



0 
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FIG. 16 

( START ) 



OBTAIN CURRENT TIME, AND TEMPORARILY REMEMBER IT AS CURRENT CHECK TIME. 



NO. 



NO/ 



NO 



PICK UP AN INDIVIDUAL ACTION DEFINITION INFORMATION 90 ONE BY ONE 
STORED IN THE INDIVIDUAL ACTION STORAGE MEANS 71. 



-151 



152 



-153 



COMPARE ACTION VALIDITY TERM 97 OF THE PICKED UP INDIVIDUAL ACTION DEFINI-\Np_ 
TION INFORMATION 90 WITH THE CHECK TIME. IS IT PAST THE VALIDITY TERM ? 



YES 



154 



DELETE THE INDIVIDUAL ACTION DEFINITION INFORMATION 90 PICKED UP. 



DOSE AN ACTION CONDITION 95 OF THE PICKED UP INDIVIDUAL ACTION 
DEFINITION INFORMATION 90 INDICATE SCHEDULE EXECUTION ? 



YES 



-155 



-156 



CHECK IF THE SCHEDULE EXECUTION TIMING IN CASE OF NON PERIODICAL EXECUTION 
OR NEXT EXECUTION TIMING IN CASE OF PERIODICAL EXECUTION IS IN A PERIOD AFTER 
THE TIME SPECIFIED BY THE PREVIOUS CHECK TIME VARIABLE AND BEFOR OR EQUAL 
VTO THE CURRENT CHECK TIME. IS THE EXECUTION TIMING WITHIN THE PERIOD ? 



YES 



REFER TO AN ACTION IDENTIFIER 94 OF THE PICKED UP INDIVIDUAL ACTION DEFINI- 
TION INFORMATION 90, ACTIVATE THE RELEVANT ACTION WITH THE INFORMATION 
DATA IDENTIFIER 41 AND AN ACTION PARAMETER 97 OF THE DEFINITION INFORMA- 
TION 90 AS PARAMETERS OF THE ACTION, AND WAIT FOR TERMINATION OF THE 
ACTION EXECUTION. . 



157 



IS THE PICKED UP INDIVIDUAL ACTION DEFINITION INFORMATION 90 THE LAST 
ENTRY STORED IN THE INDIVIDUAL ACTION STORAGE MEANS 71 ? 



YES 



STORE THE CURRNET CHECK TIME REMEMBERED IN PROCESS 151 TO THE 
PREVIOUS CHECK TIME VARIABLE AS THE PREVIOUS CHECK TIME. 
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( END ) 



12/28 



FIG. 17 

( START ) 



-161 



CHECK IF THE DESTINATION OF THE REPLY DATA 61 PASSED AS A PARAMETER' 
IS A CLIENT DEVICE 2 OR NOT. IS THE DESTINATION A CLIENT DEVICE ? 



162 



YES 



RETURN THE REPLY DATA 61 TO THE 
ACCESS REQUEST AGENT MEANS 31 
REMOVING ALL INDIVIDUAL ACTION TAGS 
62 FROM THE REPLY DATA IF THE 
REPLY DATA 61 HAS INDIVIDUAL ACTION 
TAG 62 ATTACHED. 



164 



£ 



RETURN THE REPLY DATA 61 UNCHANGED TO 
THE ACCESS REQUEST AGENT MEANS 31. 



167 



£ 



RETURN THE REPLY DATA 61 UNCHANGED TO 
THE ACCESS REQUEST AGENT MEANS 31. 



NO 



SEARCH A TABLE OF THE INDIVIDUAL 
ACTION DEFINITION INFORMATION 90 
STORED IN THE INDIVIDUAL ACTION 
STORAGE MEANS 71 WITH AN INFORMATION 
DATA IDENTIFIER 41 AS A KEY CORRES- 
PONDING TO THE INFORMATION DATA 50 
CONTAINED IN THE REPLY DATA 61. 
WAS A CORRESPONDING ENTRY FOUND ? 
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NO 



YES 



BASED ON THE ACTION TYPE CLASSIFICATION 
INFORMATION 92 OF THE FOUND ENTRY CHECK 
IF THE ENTRY IS THE ONE DEFINED BY AN 
EXPLICIT INSTRUCTION FROM THE OPERATOR ETC.] 
WITH AN INFORMATION DATA IDENTIFIER. IS THE 
ENTRY REGISTER BY AN EXPLICIT INSTRUCTION 
BY THE OPERATOR ETC ? 



NO 



YES 



ATTACH THE INDIVIDUAL ACTION TAG 62 
WHICH IS AN ACTION INFORMATION 93 OF 
THE FOUND ENTRY TO THE REPLY DATA 
61 TO MAKE A NEW REPLY DATA 61, 
AND RETURN THE NEW REPLY DATA 61 
TO THE ACCESS REQUEST AGENT 
MEANS 31. 



165 



166 



( END ) 
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FIG. 18 
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FIG. 20 

63 631 PROGRAM 



class GetAccesslnfo { // PROCESSING PROGRAM WRITTEN IN JAVA ETC. 
public static void main(String argsD ) { 



FIG. 21 
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ACCESS LOGGING 

, SUMMARIZATION PROCESSING ^_ 
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FIG. 19 



( START ) 



FROM THE OPERATOR OR ANOTHER COMMUNICATION PROXY APPARATUS POSITION- 
ED AT A HIGHER LEVEL IN THE PROXY HIEARCHY, RECEIVE AN INFORMATION DATA 
IDENTIFIER 41 OF TARGET INFORMATION DATA 50 AND A PROCESSING REQUEST 63 
TO BE HIEARCHICALLY EXECUTED WITH THE INFORMATION DATA 50. 



-171 



172 



EXECUTE THE SPECIFIED PROCESSING REQUEST 63 WITH THE INFOR- 
MATION DATA 50 CORRESPONDING TO THE SPECIFIED INFORMATION 
DATA IDENTIFIER 41, AND GET AN EXECUTION RESULT 64 OF THE 
LOCAL COMMUNICATION PROXY APPARATUS 3. 



-173 



SEARCH ACCESS LOGGINGS 85 CORRESPONDING TO THE INFORMATION 
DATA 50 STORED IN THE ACCESS LOG STORAGE MEANS 83 OF THE 
COMMUNICATION PROXY APPARATUS, AND MAKE, FROM AN ACCESSOR 
INFORMATION 43 AND A CLIENT/PROXY CLASSIFICATION INFORMATION 
44 OF THE OBTAINED ACCESS LOGGING 85, A LIST OF LOWER LEVEL 
COMMUNICATION PROXY APPARATUSES 3 IN THE PROXY HIEARCHY 
WHICH ACCESSED THE INFORMATION DATA 50. 



174 



PASS THE SPECIFIED INFORMATION DATA IDENTIFIER 41 AND THE 
PROCESSING REQUEST 63 TO THE HIEARCHICAL EXECUTION MEANS 84 
OF EACH OF LOWER LEVEL COMMUNICATION PROXY APPARATUS 3 
SPECIFIED ON THE LIST MADE IN PROCESS 173, REQUEST EXECUTION 
OF THE PROCESSING REQUEST 63, AND WAIT FOR AN EXECUTION 
RESULT 64 REPLIED BY EACH OF THE LOWER LEVEL COMMUNICATION 
PROXY APPARATUS 3. 



s 



GATHER ALL EXECUTION RESULTS 64 FROM THE LOWER LEVEL PROXY AP- 
PARATUSES AND EXECUTION RESULTS 64 OF THE LOCAL COMMUNICATION 
PROXY APPARATUS OBTAINED IN PROCESS 172, AND RETURN THEM AS EX- 
ECUTION RESULTS 64 FROM THE COMMUNICATION PROXY APPARATUSES 3 
TO THE REQUESTER, WHEN EXECUTION RESULTS 64 FROM ALL LOWER 
LEVEL COMMUNICATION PROXY APPARATUSES 3 HAVE RETURNED. 
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FIG. 25 



( START ) 



1 




OBTAIN FROM THE INDIVIDUAL ACTION EXECUTION MEANS 73 THE ACCESS 
REQUEST 40 AND AN ACTION PARAMETER 97 SPECIFYING AN IDENTIFIER OF A 
USER, A GROUP OR A DEVICE ACCSSIBLE TO THE TARGET INFORMATION DATA. 






INQUIRE TO THE USER INFORMATION MANAGEMENT SERVER 5 A 
PASSWORD ETC INCLUDED IN AN ORIGINAL ACCESS REQUEST 
ISSUER INFORMATION 42 FOR USER AUTHENTICATION, IN CASE 
AUTHENTICATION IS NEEDED FOR THE ORIGINAL ACCESS REQUEST 
ISSUER INFORMATION 42 INCLUDED IN ACCESS REQUEST 40. 




r 



181 



-182 



JUDGE IF ACCESSIBILITY INFORMATION SPECIFIED BY AN ACTION 
PARAMETER 97 IS GROUP INFORMATION OR NOT. 
IS THE INFORMATION FOR GROUP ? 



183 



YES 



,184 



NO 



.185 



INQUIRE TO THE USER INFORMATION 
MANAGEMENT SERVER 5 WHETHER 
THE ACCESSOR SPECIFIED IN THE 
ORIGINAL ACCESS REQUEST ISSUER 
INFORMATION 42 IS A MEMBER OF 
THE GROUP OR NOT. 



COMPARE INFORMATION OF A USER 
OR A DEVICE SPECIFIED BY THE 
ACTION PARAMETER 97 WITH THE 
ORIGINAL ACCESS REQUEST ISSUER 
INFORMATION 42, AND DETERMINE 
ACCESSIBILITY. 



186 



RETURN THE JUDGEMENT RESULT OF ACCESSIBILITY OBTAINED 

IN PROCESS 184 AND 185 TO THE ACCESS REQUEST AGENT MEANS 

31 THROUGH THE INDIVIDUAL ACTION EXECUTION MEANS 73. 



C 



END 
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FIG. 26 

( START ) 



191 



RECEIVE THE ACCESS REQUEST 40 FOR INFORMA- 
TION DATA 50. 


i 


/v/192 


MAKE THE INDIVIDUAL ACTION EXECUTION MEANS 73 EXECUTE 
AN INDIVIDUAL ACCESS CHECK PROCESSING SHOWN IN FIG. 14 
PASSING PARAMETERS, THE ACCESS REQUEST 40 AND THE 
ACCESS REQUEST RECEPTION EVENT AS AN EVENT INFORMA- 
TION 98, AND GET THE ACTION EXECUTION RESULT 67. 




/v/193 


PASS AN INFORMATION DAT 
IN THE ACCESS REQUEST A 
CACHE CONTROL MEANS 34 
PONDING CACHE 59. 


A IDENTIFIER 41 CONTAINED 
S A PARAMETER TO THE 
, AND REQUEST CORRES- 



TO PROCSS 199 



^ — Ino 



YES 



CALL PROCESSING SHOWN IN FIG. 14 WITH A CACHE HIT 
EVENT AS AN EVENT INFORMATION 98 LIKE PROCESS 192, 
EXECUTE INDIVIDUAL ACTION CHECK PROCESSING ON A 
CACHE HIT EVENT, AND ACTIVATE THE ACCESS CHECK 
MEANS 89 ETC. 



ACCESS REQUEST 40 



CLIENT DEVICE 2 
OR ANOTHER 
COMMUNICATION 
PROXY APPARATUS 



ACCESS REQUEST 40 
EVENT 

INFORMATION 98 



ACTION EXECUTION 
RESULT 67 

INFORMATION DATA 
IDENTIFIER 41 _ 



INDIVIDUAL ACCESS 
CHECK PROCESSING BY 
THE INDIVIDUAL ACTION 
EXECUTION MEANS 73 
SHOWN IN FIG. 14 



CACHE 59 



CACHE CONTROL 
MEANS 34 



194 



/ JUDGE THROUGH A PROCESS LIKE PROCESS 103 
/ SHOWN IN FIG. 8. IF THERE IS AN EFFECTIVE 
( CACHE 59 CORRESPONDING TO REQUESTED 
\ INFORMATION DATA 50 BASED ON THE EXECUTION , 
\ RESULT OF PROCESS 193. / 



195 



ACCESS REQUEST 40 
EVENT 

INFORMATION 98 



ACTION EXECUTION 
RESULT 67 



INDIVIDUAL ACCESS 
CHECK PROCESSING BY 
THE INDIVIDUAL ACTION 
EXECUTION MEANS 73 
SHOWN IN FIG. 14 



196 



CHECK AN ACTION EXECUTION RESULT 67 OF PROCESS 
, 194. IS THERE ANY ACCESS RIGHT ERROR ? 



NO 



YES 



197 



RETURN THE ERROR AS REPLY 
DATA 61 TO THE REQUESTER AND 
GET BACK TO PROCESS 191. 



/ 


^198 


MAKE REPLY DA" 
CACHE 59, AND , 
PROCESS 206. 


l"A 61 USING THE 
JUMP TO 



TO PROCESS 206 
(CONTINUE TO FIG. 27) 
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FROM 194 



199 



TRANSMIT AN ACCESS REQUEST 40 FOR THE INFORMATION 
DATA 50 TO SERVER DEVICE 1 OR ANOTHER COMMUNICA- 
TION PROXY APPARATUS 3 AS AN AGENT OF AN ORIGINAL 
REQUESTER, AND RECEIVE REPLY DATA 61 AS A RESULT. 



FIG. 27 



200 



JUDGE IF ANY ERROR HAS OCCURRED 
PROCESS 199 BASED ON THE REPLY DATA 
DOES THE RESULT INDICATE AN ERROR ? 

|YE~ 



201 



RETURN THE ERROR AS REPLY 
DATA 61 TO THE REQUESTER 
AND GET BACK TO PROCESS 191. 



TO PROCSS 191 



61. 



) 



ACCESS REQUEST 40 



REPLY DATA 61 



SERVER DEVICE 1 
OR ANOTHER 
COMMUNICATION 
PROXY APPARATUS 3 



NO 



202 



MAKE THE INDIVIDUAL ACTION INSTRUCTION MEANS 72 EXECUTE 
A PROCESSING IN FIG. 13 ON THE REPLY DATA RECEIVED IN PRO- 
CESS 199, AND REGISTER INDIVIDUAL ACTION DEFINITION INFOR- 
MATION 90 TO THE INDIVIDUAL ACTION STORAGE MEANS 71 WITH 
THE INSTRUCTION OF INDIVIDUAL ACTION TAG 62. 



REFER TO REPLY DATA 61 OBTAINED BY PROCESS 198, 
AND REQUEST THE CACHE CONTROL MEANS LIKE PRO- 
CESS 105 IN FIG. 8 TO HOLD THE REPLY DATA 61 AS A 
CACHE 59 IN THE CACHE STORAGE MEANS 33 IF CACHE 
ABILITY CONDITION IS SATISFIED. 



IF A CACHE 59 IS HELD IN PROCESS 204, CALL PROCESSING 
SHOWN IN FIG. 14 WITH A CACHE REGISTRATION EVENT AS 
THE EVENT INFORMATION 98 LIKE PROCESS 192, AND EXE- 
CUTE AN INDIVIDUAL ACTION CHECK PROCESSING TO BE 
EXECUTED ON A CACHE REGISTRATION EVENT. 



FROM 198 ■ 



CALL PROCESSING SHOWN IN FIG. 14 WITH A TRANSMISSION 
EVENT OF REPLY DATA 61 AS THE EVENT INFORMATIONN 98 LIKE 
PROCESS 192, EXECUTE INDIVIDUAL ACTION CHECK PROCESSING 
TO BE EXECUTED ON A TRANSMISSION EVENT OF REPLY DATA, 
AND ACTIVATE THE ACCESS LOGGING MEANS 82 ETC. 



CALL PROCESSING OF INDIVIDUAL ACTION TAG ADDING/ 
REMOVING MEANS 74 SHOWN IN FIG. 17 WITH REPLY 
DATA 61 AS A PARAMETER, AND ADD OR REMOVE THE 
INDIVIDUAL ACTION TAG 62 IF NECESSARY. 



TRANSMIT REPLY DATA 61 OBTAINED BY PROCESS 207 
TO THE REQUESTER, AND GET BACK TO PROCESS 191. 



REPLY DATA 61 



PROCESSING BY THE 
INDIVIDUAL ACTION 
INSTRUCTION MEANS 
72 SHOWN IN FIG. 13 





^203 


CALL PROCESSING SHOWN IN FIG. 14 WITH THE ACCESS REQUEST 
RECEPTION EVENT AS THE EVENT INFORMATION 98 LIKE PROCESS 
192. AND EXECUTE INDIVIDUAL ACTION CHECK PROCESSING TO BE 
EXECUTED ON AN ACCESS REQUEST RECEPTION EVENT. 


1 


^204 



ACCESS REQUEST 40 
EVENT 

INFORMATION 98 



ACTION EXECUTION 
RESULT 67 



INDIVIDUAL ACCESS 
CHECK PROCESSING BY 
THE INDIVIDUAL ACTION 
EXECUTION MEANS 73 
SHOWN IN FIG. 14 



REPLY DATA 61 



CACHE CONTROL 
MEANS 34 



205 



ACCESS REQUEST 40 
EVENT INFORMATION 98 



206 



ACTION EXECUTION 
RESULT 67 



SAME AS 
ABOVE 



INDIVIDUAL ACCESS 
CHECK PROCESSING 
BY THE INDIVIDUAL 
ACTION EXECUTION 
MEANS 73 SHOWN IN 
FIG. 14 



SAME AS ABOVE 



207 



REPLY DATA 61 



REPLY DATA 61 



PROCESSING BY THE I 
NDIVIDUAL ACTION TAG 
ADDING/REMOVING 
MEANS 74 SHOWN IN 
FIG. 17 



208 



| TO PROCSS 191 
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FIG. 28 < st : rt > 



SPECIFY TO A CLOSEST COMMUNICATION PROXY APPARATUS AT THE EDGE OF THE 
PROXY APPARATUS NETWORK TO WHICH A SERVER DEVICE 1 IS DIRECTLY CONNECTED 
VIA COMMUNICATION PATH 4 WHERE THE SERVER HAS INFORMATION DATA 50 FOR WHICH 
A SPECIAL ACTION SHOULD BE TAKEN, AN ACTION INFORMATION 93 TOGETHER WITH AN 
INFORMATION DATA IDENTIFIER 41 OF THE INFORMATION DATA 50 TO INDICATE AN EXE- 
CUTION OF AN INDIVIDUAL ACTION WHERE THE ACTION INFORMATION 93 DESIGNATES 
EXECUTION OF ACCESS LOGGING ON TRANSMISSION OF REPLY DATA 61 FOR THE INFOR- 
MATION DATA 50 OR EXECUTION OF ACCESS CHECK ON A CACHE HIT TIME TO ALLOW 
ACCESS ONLY FROM A CERTAIN GROUP OR USER. 



.211 



MAKE PUBLIC THE EXISTENCE OF THE INFORMATION DATA 50 TO EACH CLIENT 
DEVICE 2 TO ENABLE THE CLIENT DEVICE 2 TO ACCESS THE INFORMATION 
DATA VIA COMMUNICATION PROXY APPARATUS 3. 



212 



.213 



PERMIT ACCESSES FROM CLIENT DEVICES 2 FOR A CERTAIN PERIOD. 



214 

YES 



. i _ £ — v YES 

< ^ should the public accesses to the information data 50 from client devices 2 be terminated ?> 

Tno " 

. 1^215 



IF IT IS REQUIRED TO EXECUTE INTERMEDIATE PROCESSING SUCH AS TEMPORARY SUMMA- 
RIZATION OF ACCESS LOGGINGS OR UPDATING OF INFORMATION DATA 50 UNDER PUBLIC 
ACCESS, MAKING USE OF HIEARCHICAL PROCESSING SHOWN IN FIG. 19, INDICATE TO THE 
CLOSEST COMMUNICATION PROXY APPARATUS 3 TO THE SERVER DEVICE THE INTERMEDIATE 
PROCESSING SUCH AS SUMMARIZATION OF ACCESS RECORDS CORRESPONDING TO THE IN- 
FORMATION DATA 50 OR CACHE UPDATE OF EACH COMMUNICATION PROXY DEVICE 3 ACCOM- 
PANIED BY UPDATE OF INFORMATION DATA 50, EXECUTE THE INTERMEDIATE PROCESSING 
HIEARCHICALLY AT EACH COMMUNICATION PROXY APPARATUS 3 WHICH MADE AGENT AC- 
CESSES TO THE INFORMATION DATA 50, AND GET BACK TO PROCESS 213. 



TERMINATE PUBLIC ACCESSES TO THE INFORMATION DATA 50 BY INDICATING 
THAT TO SERVER DEVICE 1. 



WHEN EXECUTING FINAL PROCESSING SUCH AS SUMMARIZATION OF ACCESS RECORDS, 
MAKING USE OF HIEARCHICAL PROCESSING SHOWN IN FIG. 19, INDICATE TO THE 
CLOSEST COMMUNICATION PROXY APPARATUS 3 TO THE SEWER DEVICE THE FINAL 
PROCESSING SUCH AS SUMMARIZATION OF ACCESS RECORDS CORRESPONDING TO THE 
INFORMATION DATA 50, AND EXECUTE THE FINAL PROCESSING HIEARCHICALLY AT EACH 
COMMUNICATION PROXY APPARATUS 3 WHICH MADE AGENT ACCESSES TO THE 
INFORMATION DATA 50. . 



216 



-217 



FINALLY MAKING USE OF HIEARCHICAL PROCESSING SHOWN IN FIG. 19, INDICATE TO THE 
CLOSEST COMMUNICATION PROXY APPARATUS 3 TO THE SERVER DEVICE POST-SERVICE 
PROCESSING SUCH AS DELETION OF INDIVIDUAL ACTION DEFINITION INFORMATION 90 
CORRESPONDING TO THE INFORMATION DATA 50 OR DELETION OF ACCESS RECORD 85 
AND EXECUTE THE POST-SERVICE PROCESSING HIEARCHICALLY AT EACH COMMUNICATION 
PROXY APPARATUS 3 WHICH MADE AGENT ACCESSES TO THE INFORMATION DATA 50. 



-218 



( END ) 
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FIG. 29 



( START ) 



MAKING USE OF A CERTAIN TOOL, ADD AN INDIVIDUAL ACTION TAG 62 SPECIFYING 
AN INDIVIDUAL ACTION TO BE EXECUTED TO THE TARGET INFORMATION DATA 50, 
AND STORE THE INFORMATION DATA WITH THE INDIVIDUAL ACTION TAG 62 IN 
SERVER DEVICE 1 BEFOREHAND. 



-221 



AFTER HERE, SAME AS PROCESS 212 ~ PROCESS 218 SHOWN IN FIG. 28 



C 



END 



FIG. 30 



58 



50 



51 



13 62 



(a) 



INFORMATION 
DATA 

IDENTIFIER 


INFORMATION 
DATA 


ATTRIBUTE 
INFORMATION 


INDIVIDUAL ACTION 
TAG 


fb1 


I I 






fb2 


I I 















58 



50 



13 51 



(b) 



INFORMATION 
DATA 

IDENTIFIER 


g2 INFORMATION DATA 


ATTRIBUTE 
INFORMATION 


fb1 


Y/>/////4 I 




ft>2 


I I 
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FIG. 31 



SERVER 
DEVICE 1a 



COMMUNICATION COMMUNICATION 
PROXY PROXY 
APPARATUS 3c APPARATUS 3b 



COMMUNICATION 
PROXY 

APPARATUS 3a 



ACCESS REQUEST 40 PROCESS 301 



ACCESS REQUEST 40 PROCESS 302 



ACCESS REQUEST 40 



PROCESS 303 ! 



ACCESS REQUEST 40 



PROCESS 304 



PROCESS 305 



r 



REPLY DATA 61 (WITHOUT AN 

INDIVIDUAL ACTION TAG 62) 



PROCESS 306 



CLIENT 
DEVICE 2a 



REPLY DATA 61 (WITH AN INDIVIDUAL ACTION 
TAG 62 AS NEEDED) 



PROCESS 307 
I 



REPLY DATA 61 (WITH AN INDIVIDUAL ACTION 

TAG 62 AS NEEDED) 



PROCESS 308 
PROCESS 309 



REPLY DATA 61 (WITHOUT AN 

INDIVIDUAL ACTION TAG 62) 



PROCESS 310 
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FIG. 32 C^D 

CLIENT DEVICE 2a ISSUES AN ACCESS REQUEST 40 FOR INFORMATION DATA 50 IN SERVER DEVICEIa 



STCLOS^ COMMl^^ 
CLIENT DEVICE 2a. 



-301 



COMMUNICATION PROXY APPARATUS 3a WHICH RECEIVED THE ACCESS REQUEST 40 ISSUES AN ACCESS 
REQUEST 40 AS AN AGENT FOR THE CLIENT DEVICE 2a TO A HIGHER LEVEL COMMUNICATION PROXY 
DEVICE 3b IN THE PROXY APPARATUS HIEARCHY SINCE THE APPARATUS 3a INITIALLY HOLDS NO 
CORRESPONDING CACHE 59. 



^302 



COMMUNICATION PROXY APPARATUS 3b LIKEWISE RELAYS THE ACCESS REQUEST 40 TO A HIGHER 
LEVEL COMMUNICATION PROXY APPARATUS 3, THE HIGHER LEVEL COMMUNICATION PROXY APPARATUS 3 
FURTHER RELAYS THE ACCESS REQUEST 40 TO ANOTHER, AND FINALLY THE ACCESS REQUEST 4 IS 
TRANSMITTED TO A CLOSEST COMMUNICATION PROXY APPARATUS 3c TO WHICH THE SERVER DEVICE 1a 
IS DIRECTLY CONNECTED VIA COMMUNICATION PATH 4. 



^303 



THE COMMUNICATION PROXY APPARATUS 3c WHICH RECEIVED THE ACCESS ^ REQUEST 40 LIKEWISE ^ 
ISSUES AN ACCESS REQUEST AS AN AGENT TO THE SERVER DEVICE 1a SINCE THE APPARATUS 3c r 
INITIALLY HOLDS NO CORRESPONDING CACHE 59. 



-304 



FOR THE ACCESS REQUEST 40, THE SERVER DEVICE 1a RETURNS REQUESTED JNFORMApON DATA 50 
AND ATTRIBUTE INFORMATION 51 OF THE INFORMATION DATA AS REPLY DATA 61 TO THE CLOSEST 
COMMUNICATION PROXY APPARATUS 3c. 



.305 



THE CLOSEST COMMUNICATION PROXY APPARATUS 3c HOLDS THE REPLY DATA 61 RECEIVED FROM THE < 306 
SERVER DEVICE 1 AS CACHE 59 IF POSSIBLE, TAKES INDIVIDUAL ACTION FOR THE INFORMATION I DATA IF > 
INDIVIDUAL ACTION FOR THE INFORMATION DATA 50 HAS BEEN ALREADY SPECIFIED BY MEANS OF AN * 
EXPLICIT INSTRUCTION FROM THE OPERATOR ETC. WITH THE INFORMATION DATA IDENTIFIER 41 LAND 
FURTHER RETURNS TO THE REQUESTING COMMUNICATION PROXY DEVICE 3 REPLY DATA 61 ATTACHING 
A CORRESPONDING ACTION TAG 62 IS SPECIFIED. 



THE REPLY DATA 61 IS RELAYED UP TO COMMUNICATION PROXY APPARATUS 3a i WITH FLOW OF ^ 
OPPOSITE DIRECTION TO THAT OF THE ACCESS REQUEST 40. COMMUNICATION PROXY APPARATUS 3b ^ 
AND 3a HOLDS THE REPLY DATA 61 AS CACHE 59 IF POSSIBLE, AND TAKES AN INDIVIDUAL ACTION 
CORRESPONDING TO THE INFORMATION DATA IF AN INDIVIDUAL ACTION TAG 62 IS ATTACHED WITH THE 
REPLY DATA 61. 



307 



COMMUNICATION PROXY APPARATUS 3a LIKEWISE HOLDS THE RECEIVED REPLY DATA 61 AS CACHE 59 
IF POSSIBLE AND TAKES AN INDIVIDUAL ACTION CORRESPONDING TO THE INFORMATION DATA IF AN 
INDIVIDUAL ACTION TAG 62 IS ATTACHED WITH THE REPLY DATA 61. 



-308 



I 



COMMUNICATION PROXY APPARATUS 3a RETURNS THE REPLY DATA gi TO DEVICE 2 WTH 
AN INDIVIDUAL ACTION TAG 62 REMOVED IF ANY WHICH IS ATTACHED WITH THE REPLY DATA 61. 



-309 



CLIENT DEVICE 2a RECEIVES THE REPLY DATA 61 FROM THE COMMUNICATION PROXY APPARATUS 3a, 
AND A SERIES OF PROCESSING ON THE INITIATED ACCE SS REQUEST 40 TERMINATES. 

. j 



^310 
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FIG. 33 



COMMUNICATION COMMUNICATION 
SERVER PROXY PROXY 

DEVICE 1a APPARATUS 3c APPARATUS 3b 



COMMUNICATION 
PROXY 

APPARATUS 3a 













ACCESS REQUEST 40 








PROCESS 312 
PROCESS 313 






REPLY DATA 61 

(WITHOUT AN INDIVIDUAL ACTION TAG 62) 









CLIENT 
DEVICE 2a 



PROCESS 311 



PROCESS 314 



FIG. 34 

( START ) 

-311 



I 



IT 



SAME CLIENT DEVICE 2a AS EXPLAINED IN FIG. 32 AND FIG. 33 ISSUES AGAIN AN 
ACCESS REQUEST 40 TO THE COMMUNICATION PROXY APPARATUS 3a FOR THE 
SAME INFORMATION DATA 50 IN THE SAME SERVER DEVICE 1a. 



-312 



SINCE THE COMMUNICATION PROXY APPARATUS 3a WHICH RECEIVED THE ACCESS 
REQUEST 40 ALREADY HOLDS CACHE 59 CORRESPONDING TO THE ACCESS REQUEST 40 
AS EXPLAINED WITH FIG. 31 AND FIG. 32, APPARATUS 3a USES THE CACHE 59 AS REPLY 
DATA 61 AND FURTHER TAKES A CORRESPONDING INDIVIDUAL ACTION IF AN INDIVIDUAL 
ACTION TAG 62 IS INCLUDED IN THE CACHE 59. 



^313 
314 



COMMUNICATION PROXY APPARATUS 3a RETURNS THE REPLY DATA 61 FROM CACHE 
59 WITH THE INDIVIDUAL ACTION TAG 62 REMOVED TO THE REQUESTING CLIENT 
DEVICE 2a LIKE PROCESS 309. 



CLIENT DEVICE 2a RECEIVES THE REPLY DATA 61, AND A SERIES OF PROCESSING ON 
THE REPEATED ACCESS REQUEST 40 TERMINATES. 
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FIG. 35 



SERVER 
DEVICE 1a 



COMMUNICATION 
PROXY 

APPARATUS 3c 



COMMUNICATION 
PROXY 

APPARATUS 3b 



COMMUNICATION 
PROXY 

APPARATUS 3d 



CLIENT 
DEVICE 2a 



PROCESS 321 



ACCESS REQUEST 40 



PROCESS 322 



ACCESS REQUEST 40 



PROCESS 323 



REPLY DATA 61 

(WITH AN INDIVIDUAL ACTION TAG 62 AS NEEDED) 



PROCESS 324 
PROCESS 325 



REPLY DATA 61 

(WITHOUT AN INDIVIDUAL ACTION TAG 62) 



T 



PROCESS 326 



FIG. 36 



( START ) 

7 



321 



A CLIENT DEVICE 2d WHICH IS CONNECTED TO A SERVER DEVICE 1a VIA COMMUNICA- 
TION PROXY APPARATUSES 3d, 3b AND 3c ISSUES AN ACCESS REQUEST 40 FOR THE 
SAME INFORMATION DATA 50 OF THE SAME SERVER DEVICE 1a SHOWN IN FIG. 31 AND 
FIG. 32 TO THE COMMUNICATION PROXY APPARATUS 3d 



322 



COMMUNICATION PROXY APPARATUS 3d WHICH RECEIVED THE ACCESS REQUEST 40 
RELAYS THE ACCESS REQUEST 40 TO COMMUNICATION PROXY APPARATUS 3d SINCE 
THE APPARATUS 3d INITIALLY HOLDS NO CORRESPONDING CACHE 59. 



SINCE THE COMMUNICATION PROXY APPARATUS 3b ALREADY HOLDS CORRESPOND- 
ING CACHE 59, TAKES A CORRESPONDING INDIVIDUAL ACTION IF AN INDIVIDUAL AC- 
TION TAG 62 IS INCLUDED IN THE CACHE 59, AND THEN RETURNS THE CACHE 59 
AS REPLY DATA 61 TO THE COMMUNICATION PROXY DEVICE 3d. . 



-323 



324 



COMMUNICATION PROXY APPARATUS 3d WHICH RECEIVED THE REPLY DATA 61 HOLDS 
THE REPLY DATA 61 AS A CACHE 59, AND TAKES A CORRESPONDING INDIVIDUAL 
ACTION IF AN INDIVIDUAL ACTION TAG 62 IS ATTACHED WITH THE REPLY DATA 61. 



s 



-325 
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COMMUNICATION PROXY APPARATUS 3d FURTHER RETURNS RECEIVED REPLY DATA 61 
WITH THE INDIVIDUAL ACTION TAG 62 REMOVED TO THE REQUESTING CLIENT DEVICE 2d. 



THE REQUESTING CLIENT DEVICE 2d RECEIVES THE REPLY DATA 61, AND THE PRO- 
CESSING TERMINATES. 
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FIG. 37 



68 



INDIVIDUAL 
ACTION TAG 
62 



< PROXY ACTION TAG > 



< ACTION PROGRAM > 



class actionX { // ACTION PROGRAM X 
public static void main(String argsg ) { 



} 



< /ACTION PROGRAM > 

< ACTION CONDITION > 
< ACTION PARAMETER) 

< ACTION VALIDITY TERM > 



-79 ACTION 
PROGRAM 
INFORMA- 
TION 



ON A CACHE HIT 
GROUP A 
98/12/10 12:00:00 



< /ACTION CONDITION > 

< /ACTION PARAMETER > 

< /ACTION VALIDITY TERM > 



< /PROXY ACTION TAG > 



93 ACTION INFORMATION 



69 



FIG. 38 



41 



92 



93 



,71 



1— 

INFORMATION 
DATA IDENTIFIER 


1 

ACTION TYPE 
CLASSIFICA- 
TION 

INFORMATION 


78 95_ ACTION INFORMATION J6 ' 97 


ENTRY ADDRESS 
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ACTION 
PARAMETER 


ACTION 
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// SERVER1b/fb2 


TAG 

INSTRUCTION 




1 • 


ON REPLY DATA 
TRANSMISSION 




99/ 1/1 10:00:00 








• 






i 90 







class actionX { // ACTION PROGRAM X 
public static void main(String argsrj ) { 



} 



-79 



,79 



class actionY { // ACTION PROGRAM Y 
public static void main(String argsD ) { 



} 
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FIG. 39 



ACTION IDENTIFIER 94 
ACTION PROGRAM 
INFORMATION 79 
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77- 



70- 

31- 
32- 



PROGRAM LOAD MEANS 



REGISTER/REFER 



LOAD 



ACTION PROGRAM 

CORRELATION 

TABLE 



EXECUTE 
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INDIVIDUAL ACTION 
CONTROL MEANS 




ACTION PROGRAM INFORMATION 
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PROGRAM 
STORAGE 
MEANS 



,79 



ACTION PROGRAM INFORMATION 



1—82 
1—89 



DISTRIBUTED 
ACCESS CONTROL 
MEANS 



ACCESS REQUEST AGENT MEANS 



CACHING MEANS 



80 



FIG. 40 
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ENTRY ADDRESS 


ACCESS LOGGING 
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20000 
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FIG. 41 



( START ) 



1 


r 


RECEIVES A PROGRAM LOAD REQUEST FROM THE OPERATOR 
ETC. SPECIFYING AN ACTION IDENTIFIER 94 AND ACTION 
PROGRAM INFORMATION 79. 




r 


ALLOCATE SUITABLE SIZE OF EMPTY AREA IN PROGRAM STORAGE 
MEANS 76 AND STORE THE ACTION PROGRAM INFORMATION 79. 






REGISTER AN ENTRY ADDRESS 71 
GRAM INFORMATION 79 AND A RE 
ACTION IDENTIFIER 94 INTO THE 
TABLE 77, AND THE LOAD PROCE 


3 OF THE STORED ACTION PRO- 
ELATIONSHIP WITH THE SPECIFIED 
ACTION PROGRAM CORRELATION 
SSING TERMINATES. 
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□ 



I hereby claim the benefit under Title 35, United States Code, 
Section 119(e) of any United States provisional application (s) 
listed below. 



(Application No.) 



(Filing Date) 



mz, TfB07OT&*y§3 5112 o mzm^xTtB<D^m 
*»3 6 5*(c) \zmr<m^z.c\z±mL^r 0 &tz, * 

rz^n^<D^mjzm't^mmti.mmz^xm^mm^^ 



(Application No.) 



(Filing Date) 



(Application No.) 



(Filing Date) 



fimmx$> 0 , j5oa©AfLfc* ntfo&mvz t izm 
*r < mM&±xnnx&% tict^s z.t, \z%tmzfc 

moo lmzm^fz, m&&ft}mm> ^v<\z^®m^z 
t>ft%£t&mmi>, <k^xcc\z±.m<Dzit< j £w$:3kL£ 

To 



(Application No.) 



(Filing Date) 



I hereby claim the benefit under Title 35, United States Code, 
Section 120 of any United States application (s), or 365(c) of 
any PCT international application designating the United 
States, listed below and, insofar as the subject matter of each 
of the claims of this application is not disclosed in the prior 
United States or PCT International application in the manner 
provided by the first paragraph of Title 35, United States Code 
Section 112, I acknowledge the duty to disclose information 
which is material to patentability as defined in Title 37, Code of 
Federal Regulations, Section 1.56 which became available 
between the filing date of the prior application and the national 
or PCT international filing date of application. 

(Status: Patented, Pending, Abandoned) 

mu : ¥?nifr*im, mm*, warn 

(Status: Patented, Pending, Abandoned) 

mu : Aw*, tsmm 

I hereby declare that all statements made herein of my own 
knowledge are true and that all statements made on 
information and belief are believed to be true; and further 
that these statements were made with the knowledge that 
willful false statements and the like so made are punishable 
by fine or imprisonment, or both, under Section 1001 of Title 
18 of the United States Code and that such willful false 
statements may jeopardize the validity of the application or 
any patent issued thereon. 
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Japanese Language Declaration 



POWER OF ATTORNEY: As a named inventor, I hereby 
appoint the following attorney (s) and/or agent (s) to prosecute this 
application and transact all business in the Patent and Trademark 
Office connected therewith (list name and registration number) 



Donald R. Antonelli, Reg. No. 2 0,296; Dav id T. Terry, Reg. No. 
20,178; Melvin Kraus, Reg. No, 22,466; William I. Solomon, Reg. 



No. 28. 565: G regory E. Montone, Reg. No . 28,141; Ro nald J. 
Shore, Reg. N o. 28,577; Do nald E. Stout, Reg. No. 2 6,422; Alan 
E. Schiavelli, Reg. No ^ 32,087; Ja mes N. Dresser, Reg. No. 
22,973 and Carl I. Brundidge, Reg. No. 29,621 



Send Correspondence to: 

Antnnftlli Tfirr y Stout & KrausJ- LP^ 

^Suite 1 Rnn „ 



1300 North Seventeenth Street 



Arlington, Virginia 22209 



: (Ec&&£J^t£#-^) Direct Telephone Calls to: (name and telephone number) 

Telephone: (703) 312-6600 
Fax: (703)312-6666 







1 Ful1 name of sole or first inventor 
Takashi NISHIKADO 






Inventor's signature . Date / 

, TU^, • fy&£A>M*> M*v At log / 






Residence ■~* a ^~°7') v 
JSa^asakLJapan ( j r 


HH Citizenship 

Japan 






Post Office Address 

c/o Hitachi, Ltd., Intellectual Property Group 
New Marunouchi Bldg. 5-1 , Marunouchi 1 -chome, 
Chiyoda-ku, Tokyo 100-8220, Japan 



(m~^0&m^m^Z^^X&mmzmmV,m%%^% (Supply similar information and signature for second and 
£ <h ) subsequent joint inventors.) 
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m 






Full name of second joint inventor, if any 
Kenichi YOSHim 










Second inventor's signature Date i t f t I 


im 








Residence —rtf) v ^ 
Kawasaki. Japan CjT^r^ 


gj| Citizenship 

Japan 










Post Office Address 

c/o Hitachi, Ltd., Intellectual Property Group 
New Marunouchi Bldg. 5-1 , Marunouchi 1 -chome, 
Chiyoda-ku, Tokyo 100-8220, Japan 




mm 






Full name of third joint inventor, if any 










Third inventor's signature Date 










Residence 


Citizenship 










Post Office Address 




mm 






Full name of fourth joint inventor, if any 




wme>m% 






Fourth inventor's signature Date 










Residence 


g^f Citizenship 










Post Office Address 




mm 






Full name of fifth joint inventor, if any 




mmom^ 


Btt 




Fifth inventor's signature Date 










Residence 


gHH Citizenship 










Post Office Address 



(m^W,^<Dmm^mmiZ-D^X%mmz$'Emh,m^^^ (Supply similar information and signature for sixth and 
£ £) subsequent joint inventors.) 
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CHANGE OF 
CORRESPONDENCE ADDRESS 

Application 

Address to: 

Assistant Commissioner for Patents 
Washington, D.C. 20231 



Application Number 



Fittng Date 



First Named Inventor 



Group Art Unit 



Examiner Name 



Attorney Docket Number 



09/890826 



August 6, 2001 



NISHIKADO, et al 



520,40411X00 



Please change the Correspondence Address for the above-identified application 
o: 

hT} Customer Number 



020457 



Type Customer Number here 



OR 




020457 " 

mm moetm office ) 



□ Firm or 
Individual Name 



Address 



AiSress 



State 



ZIP 



Opntry 



T4t$phone 



Fax 



form cannot be used to change the data associated with a Customer Number. To 

Shange the data associated with an existing Customer Number use "Request for Customer 
lumber Data Change" (PTO/SB/124). 



I am the : 

| j Applicant 

| \ Assignee of record of the entire interest. 

Certificate under 37 CFR 3.73(b) is enclosed. 

GQ Attorney or agent of record . 



Typed or 
Printed Name 


Carl I. Brundidge 


Registration NO- 29,621 


Signature 




Date 


August 6/2OO 



Burden Hour Statement This form is estimated to take 0.2 hours to complete. Time vary depending upon the needs of the kyfcviduai case. Any 
comments on the amount of time you are required to comptete this form should be cent to the Chief lafcxmatioa Officer, Patent and Trademark Office. 
Washington. DC 2023 t. OO NOT SENO FEES OR COMPLETED FORMS TO THIS AOORESS, SENO TO: Assistant CommJsskxwr tor Patents, 
Washington, OC 20231. 



United States Patent & Trademark Office 

Office of Initial Patent Examination - Scanning Division 




Application deficiencies found during scanning: 

fl Pagefs) h 04 C o f L f I rtA crtJnn were not present 

for scanning. ' (Document title) 



□ Page(s) of w ere not present 

for scanning. (Document title) 



□ Scanned copy is best available. 



